General

  • Target

    2588-30-0x0000000000300000-0x0000000000330000-memory.dmp

  • Size

    192KB

  • MD5

    dfcc6fb41d40b9aa509b9fa57dc0acec

  • SHA1

    fc457cc98d63a41398ef59bc903d254ab8fcb056

  • SHA256

    8f551dc051ccc81908fadcfcccfc65d6ec1b5b9c3ab7ecbaf29cc714f5dbaa04

  • SHA512

    7b8e224814064f3b45fafd25ae6ece4d5df824309902e563e558f0e0a9e8c93a2514877d17574a093a720ff5844377facd17c4bbf4c7794896962f7113099ca0

  • SSDEEP

    3072:8wgwJp8A/xdimI06X7vV6OPEsUc/W0E0ilHPgM1J08e8h3:8JzAmmI0k7vVe0E0YIM1i

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lux3

C2

176.123.9.142:14845

Attributes
  • auth_value

    e94dff9a76da90d6b000642c4a52574b

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2588-30-0x0000000000300000-0x0000000000330000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections