General

  • Target

    2164-29-0x0000000000220000-0x0000000000250000-memory.dmp

  • Size

    192KB

  • MD5

    5605c2eff0594aff9152d250b71c9520

  • SHA1

    5f621ba61c50247c3fabfbcd6dd910c4348107dc

  • SHA256

    50c8136e312a70fd65bbbdf2caf9648f295c34033ecea26be65b0d5b9654fa35

  • SHA512

    c7b39849893da77df68893818776a3d37c6b12da92f0bb89f293bb39b5bde67ad5cf5e8410af15589a88f5385da2088ddaf9a5dbc713f668e67e4e6256e77619

  • SSDEEP

    3072:8wgwJp8A/xdimI06X7vV6OPEsUc/W0E0ilHPgM1JS8e8h3:8xzAmmI0k7vVe0E0YIM1k

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lux3

C2

176.123.9.142:14845

Attributes
  • auth_value

    e94dff9a76da90d6b000642c4a52574b

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2164-29-0x0000000000220000-0x0000000000250000-memory.dmp
    .exe windows x86


    Headers

    Sections