Overview

overview

10

Static

static

10

2952-94-0x...ry.exe

windows7-x64

2952-94-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2952-94-0x0000000000250000-0x00000000002DC000-memory.dmp

  • Size

    560KB

  • MD5

    181128d4ff52ee630014c4b9c12ee913

  • SHA1

    24c7cb5eac6e440ad6c6c2254b429cce26cdf94a

  • SHA256

    dc8c22bb95fc210c6e303baeaf5a7ad4e0d9bfa24ff1e53037f01bb862b9e207

  • SHA512

    027269693d62af68dbd4e0b2073547218aa56f301d66bf126340a464bbd50d2a2575c0902be8e0cb7ecab6a206f085464be93f66c034a3f8e42dcbbcf72b5019

  • SSDEEP

    12288:IpEYNICvkTDOxae+hCGzsX7vpRP5/WVcH3YnXQQncrdM:Ii83kTaEe+VzY7/5eVcHVM

Score
10/10
lampredline

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2952-94-0x0000000000250000-0x00000000002DC000-memory.dmp
    .exe windows x86


    Headers

    Sections