General

  • Target

    2060-40-0x0000000000220000-0x0000000000250000-memory.dmp

  • Size

    192KB

  • MD5

    e8d2ba22e9ef0f3a47ab629e18147055

  • SHA1

    bc83fbd9dfaa230a1eef95ac564dbe12da27d51d

  • SHA256

    2550593b416e1b97c6511a50b622c1e1f226bdce9da22555334b655b6c839f08

  • SHA512

    a9bf45e7afc538ac2f543113550e96b27c6165f4b32a7d4201734e15887adbc194e15fba80beb813d1b3158d3890df8c852519460b155241af419830961706e7

  • SSDEEP

    3072:8wjwJp8A/xdimI06X7vV6OPEsUc/W0E0ilHPgM1JS8e8h3:8OzAmmI0k7vVe0E0YIM1k

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lux3

C2

176.123.9.142:14845

Attributes
  • auth_value

    e94dff9a76da90d6b000642c4a52574b

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2060-40-0x0000000000220000-0x0000000000250000-memory.dmp
    .exe windows x86


    Headers

    Sections