Overview

overview

10

Static

static

10

2480-112-0...ry.exe

windows7-x64

2480-112-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2480-112-0x0000000000320000-0x00000000003AC000-memory.dmp

  • Size

    560KB

  • MD5

    21a9b2af4cdc3bd9cc56144b452039bd

  • SHA1

    4f0f33733d203475dee24941bcdb8c58d436303f

  • SHA256

    6992167ab9dc713e1941d9ff9f3d60cb810d65ff082b19ac818df5682a4795a4

  • SHA512

    6423fcabb19f944e2fd3b122e94b174a518d09c1421501dafdb6e934d060cf589919737d90c62671fb98ca5144460ed23f3c806f1822557c45c12b620f41fb0d

  • SSDEEP

    6144:9qSs/hqm6DDOu/YaPVFNjyRTulJHR/2qUrzUTCWRbn87wMqCVFl+ftH9NU2NYHo2:9FsJq7y+fUrQn5UwCavNUVoBQJv/Uy

Score
10/10
lampredline

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2480-112-0x0000000000320000-0x00000000003AC000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections