General

  • Target

    2604-34-0x0000000000450000-0x0000000000480000-memory.dmp

  • Size

    192KB

  • MD5

    bf0cacd61ec8873e77204c73c72d1b4d

  • SHA1

    c77367ece9a3ba5b4589c7d9a860547ef59e86c9

  • SHA256

    4070861cc18e00135daf3970017407c7e3661640aeffa61b026703ab0cf893cc

  • SHA512

    b47e80fce9a27df629c12cd57930fab818d3d85a58b2bd06342fc79ac1c4259fbab1840e2ff48f2a575cd4f79160347bd1ad2f24f0e564d0522a430b83c4edc8

  • SSDEEP

    3072:8wnwJp8A/xdimI06X7vV6OPEsUc/W0E0ilHPgM1Jj8e8h3:8izAmmI0k7vVe0E0YIM1J

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lux3

C2

176.123.9.142:14845

Attributes
  • auth_value

    e94dff9a76da90d6b000642c4a52574b

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2604-34-0x0000000000450000-0x0000000000480000-memory.dmp
    .exe windows x86


    Headers

    Sections