General

  • Target

    2776-24-0x0000000000220000-0x0000000000250000-memory.dmp

  • Size

    192KB

  • MD5

    082e4514098b6daad66ce588f01ad67e

  • SHA1

    f996be8017a46b50498a62a5eab2f0aa5905652f

  • SHA256

    0dbafed7d1f0447006d59dded4758a6cd4596f9d99c895e09ec84e792b365a8d

  • SHA512

    fa1800ffc2bfc6250f9c731a83b4d9a7923436b72af9ac4a3b18af3d2e0927e95db25e8a4cf0c6c7c772b8c17dee56d1af548482608d5d3a2f7af8c6d9805e16

  • SSDEEP

    3072:8wvwJp8A/xdimI06X7vV6OPEsUc/W0E0ilHPgM1JS8e8h3:86zAmmI0k7vVe0E0YIM1k

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lux3

C2

176.123.9.142:14845

Attributes
  • auth_value

    e94dff9a76da90d6b000642c4a52574b

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2776-24-0x0000000000220000-0x0000000000250000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections