General

  • Target

    2716-30-0x00000000001B0000-0x00000000001E0000-memory.dmp

  • Size

    192KB

  • MD5

    e63a001ea34cb2f5529795f73400b6c1

  • SHA1

    f691bd40822d5a106e502b32c0b5827a985fba05

  • SHA256

    b3d74ab831247cf6ee19cdc0ecc05f0483802231710943ae47634212d85bd717

  • SHA512

    8e6ae62f4aab326def78e28654fb5eed87a48c709676583bdb97b4083580239f68817015449faa7007a9eafc6e7890b738918d702fdb7d7e721790e28d89e3b3

  • SSDEEP

    3072:8wxwJp8A/xdimI06X7vV6OPEsUc/W0E0ilHPgM1Jt8e8h3:84zAmmI0k7vVe0E0YIM1H

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lux3

C2

176.123.9.142:14845

Attributes
  • auth_value

    e94dff9a76da90d6b000642c4a52574b

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2716-30-0x00000000001B0000-0x00000000001E0000-memory.dmp
    .exe windows x86


    Headers

    Sections