redline | 2976-35-0x0000000000290000-0x00000000002C0000-memory[.]dmp

General

Target
2976-35-0x0000000000290000-0x00000000002C0000-memory.dmp
Size 192KB
Sample231013-d3mb4acf6t
SHA256 34617a9fd03fcf0f1eba9fdfcb04bfe65f83a00cc0d0b4ffaf423826e7ca5c7b
MD5 0956c97f0813b377292b2d1123bcc813
SHA1 1b3c039fb09b7c66f7337090cdc614d965713026
SHA512 a3db90122161b3876df7428d3789736af9054ab6a3a39cf393dbf47f252927f42e95d20ea24c056c613b9120b364b26b82146a260270eb5e45e90ceb33aa49b0
SSDEEP 3072:8wZwJp8A/xdimI06X7vV6OPEsUc/W0E0ilHPgM1JX8e8h3:8YzAmmI0k7vVe0E0YIM19
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

lux3 redline

Malware Config

Extracted

Family

redline

Botnet

lux3

C2

176.123.9.142:14845

Attributes

auth_value
e94dff9a76da90d6b000642c4a52574b

Signatures

Redline family
redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2976-35-0x0000000000290000-0x00000000002C0000-memory.dmp

File Explorer

2976-35-0x0000000000290000-0x00000000002C0000-memory.dmp

.exe 192KB

2976-35-0x0000000000290000-0x00000000002C0000-memory.dmp

SHA256 34617a9fd03fcf0f1eba9fdfcb04bfe65f83a00cc0d0b4ffaf423826e7ca5c7b
MD5 0956c97f0813b377292b2d1123bcc813
SHA1 1b3c039fb09b7c66f7337090cdc614d965713026
SHA512 a3db90122161b3876df7428d3789736af9054ab6a3a39cf393dbf47f252927f42e95d20ea24c056c613b9120b364b26b82146a260270eb5e45e90ceb33aa49b0
SSDEEP 3072:8wZwJp8A/xdimI06X7vV6OPEsUc/W0E0ilHPgM1JX8e8h3:8YzAmmI0k7vVe0E0YIM19
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

145182

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing