General

  • Target

    2704-30-0x00000000002C0000-0x00000000002F0000-memory.dmp

  • Size

    192KB

  • MD5

    db5c689d55953a8357344a9684954283

  • SHA1

    ea3af4e78fed78d00d27b5f7d9c7942daa419f5d

  • SHA256

    1c76658d4f45db58d2b3e34c3824abc538d0a371701feb7b2766b1c789de6524

  • SHA512

    eca96d5719e5bd5df1e2363a9a743dbb7fda463b8f46e0bf86b7605d42201635bd70914b4276ae23e6fee6343cdd2b03da1079b4a5c2875eeb3d004d2faf3ede

  • SSDEEP

    3072:8w8wJp8A/xdimI06X7vV6OPEsUc/W0E0ilHPgM1JQ8e8h3:8NzAmmI0k7vVe0E0YIM1u

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lux3

C2

176.123.9.142:14845

Attributes
  • auth_value

    e94dff9a76da90d6b000642c4a52574b

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2704-30-0x00000000002C0000-0x00000000002F0000-memory.dmp
    .exe windows x86


    Headers

    Sections