redline | 2708-30-0x0000000000230000-0x0000000000260000-memory[.]dmp

General

Target
2708-30-0x0000000000230000-0x0000000000260000-memory.dmp
Size 192KB
Sample231012-s1ea2agh81
SHA256 7494783804e106dcb99b46a3e805e7e3cd545aa1aff61453e0817d6e43ad6221
MD5 03e9392383075956a4d4c1759e0df6f3
SHA1 ac3a4cb64b4484c78be8533dd5d02785176e976c
SHA512 c43fdee1db76fa72e99af6b6146a707f27f124367d61c75e3b30bae05459e2a9ca0c3823dca61c886dec67460115d2a0f68c1faa7763deb8180c782e320f7c57
SSDEEP 3072:8wPwJp8A/xdimI06X7vV6OPEsUc/W0E0ilHPgM1Jl8e8h3:8azAmmI0k7vVe0E0YIM1f
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

lux3 redline

Malware Config

Extracted

Family

redline

Botnet

lux3

C2

176.123.9.142:14845

Attributes

auth_value
e94dff9a76da90d6b000642c4a52574b

Signatures

Redline family
redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2708-30-0x0000000000230000-0x0000000000260000-memory.dmp

File Explorer

2708-30-0x0000000000230000-0x0000000000260000-memory.dmp

.exe 192KB

2708-30-0x0000000000230000-0x0000000000260000-memory.dmp

SHA256 7494783804e106dcb99b46a3e805e7e3cd545aa1aff61453e0817d6e43ad6221
MD5 03e9392383075956a4d4c1759e0df6f3
SHA1 ac3a4cb64b4484c78be8533dd5d02785176e976c
SHA512 c43fdee1db76fa72e99af6b6146a707f27f124367d61c75e3b30bae05459e2a9ca0c3823dca61c886dec67460115d2a0f68c1faa7763deb8180c782e320f7c57
SSDEEP 3072:8wPwJp8A/xdimI06X7vV6OPEsUc/W0E0ilHPgM1Jl8e8h3:8azAmmI0k7vVe0E0YIM1f
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

145182

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing