Overview

overview

10

Static

static

10

2812-253-0...ry.exe

windows7-x64

2812-253-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2812-253-0x0000000001380000-0x00000000013A0000-memory.dmp

  • Size

    128KB

  • MD5

    5ccae670dd3b2cc866b23972f93a440b

  • SHA1

    fcf1818c1fb8345e1c4cfae3f16921d99e368c44

  • SHA256

    47a9e42307d231cb5ad42cd4b0cd6fea75f0dc85d4a3575036fe630e8499fd5d

  • SHA512

    11302281368bd25924fd72c63ebadb418d4c7e42ddc9bcac15296f3d14fdc8b177ef0825917786066feb7478adcfc4d64852fc1eefec02a974c3ce6b3e9b3db4

  • SSDEEP

    3072:qcvFBYCY+piqI+Tg6h4MLkKUQc7b9fDWhB4EASNo:qcvmvI4MoKtcJWhB4jS

Score
10/10
ruxarr_ggredline

Malware Config

Extracted

Family

redline

Botnet

RuXaRR_GG

C2

insttaller.com:40915

Attributes
  • auth_value

    4a733ff307847db3ee220c11d113a305

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline

Files

  • 2812-253-0x0000000001380000-0x00000000013A0000-memory.dmp
    .exe windows x86


    Headers

    Sections