General

  • Target

    2252-93-0x0000000000250000-0x00000000002DC000-memory.dmp

  • Size

    560KB

  • MD5

    337f4b7eab5153c86537310e5f771437

  • SHA1

    b77317c4c9cb1d4337238656644ed4141e4ff85e

  • SHA256

    795e863fce6602bc86aec42ab37740c4ec8182bfa9cada328bad244e5e3d6e66

  • SHA512

    7bf8aeb85d85d814de9a1e628c532b1daaf97baf92a7a5b05fc65264361d2cab19932d7532b7bf386bd536a0c28fc927608dc8c14332fd1fa1ab546622706250

  • SSDEEP

    12288:+qN2I6UaTfEe81A1s907ACfJtgGVnAOPw1l+Eg6peQ7SyOSh:+3IicsH1Y8w13h

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2252-93-0x0000000000250000-0x00000000002DC000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections