Overview

overview

10

Static

static

10

3468-121-0...ry.exe

windows7-x64

3468-121-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3468-121-0x0000000000400000-0x0000000000420000-memory.dmp

  • Size

    128KB

  • MD5

    55f7a2358232c5b91e6350e8da9938bf

  • SHA1

    e44894a5dc7e73b11997aed3e0eac32c87ea3b6c

  • SHA256

    c875eb1300ea2be579587284365984085923fe239a06796c0ac9e50e2e78fba1

  • SHA512

    4204231d43e62123ba84868891f7717f23531b4aac93946c593c4747960ad0de78df624315b7b953eaf7f3702c723aec93419b41b7f7e695b419e45b6d0302bb

  • SSDEEP

    3072:XZkqs4bLjlp5q8+6A2kW68k7dqj/PVmIJv8h:S4bLjlp5q8+7rmq

Score
10/10
chrisredline

Malware Config

Extracted

Family

redline

Botnet

chris

C2

194.104.136.5:46013

Attributes
  • auth_value

    9491a1c5e11eb6097e68a4fa8627fda8

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline

Files

  • 3468-121-0x0000000000400000-0x0000000000420000-memory.dmp
    .exe windows x86


    Headers

    Sections