Overview

overview

10

Static

static

10

4476-25-0x...ry.exe

windows7-x64

1

4476-25-0x...ry.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4476-25-0x0000000000440000-0x0000000000470000-memory.dmp

  • Size

    192KB

  • MD5

    ce628db5981db892af1019ed8d7c95b2

  • SHA1

    9c794fb4e7fd32c329c02064e0cd0119509ca4de

  • SHA256

    e600f0018f81a62de28ca35b58d09fe5f09a5d26fdb5c5ccae9ebc40454d27aa

  • SHA512

    a1460185c1d077fd89b4673b03b81ecf7f433be1d94d7eaff5d172324825b922a725e19a57564a352c0b59899533cac6b864c50f869df62c25cbe8882849c895

  • SSDEEP

    3072:8w8wJp8A/xdimI06X7vV6OPEsUc/W0E0ilHPgM1JY8e8h3:8hzAmmI0k7vVe0E0YIM12

Score
10/10
lux3redline

Malware Config

Extracted

Family

redline

Botnet

lux3

C2

176.123.9.142:14845

Attributes
  • auth_value

    e94dff9a76da90d6b000642c4a52574b

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4476-25-0x0000000000440000-0x0000000000470000-memory.dmp
    .exe windows x86


    Headers

    Sections