Overview

overview

10

Static

static

10

102992-143...ry.exe

windows7-x64

102992-143...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    102992-143-0x0000000000800000-0x0000000000828000-memory.dmp

  • Size

    160KB

  • Sample

    220928-mx69raggdk

  • MD5

    1fa1b63bccd8ea881610f987a23fb4a3

  • SHA1

    fa26b70a6b2ce4ea6f0ae0200447172ef398dc9e

  • SHA256

    8afe98e70899165165b6f4665cecbb9f71af2a26091096c6095ed1ee66399cfa

  • SHA512

    cbb6f08b19c98391e4e338e0c374cefaffac98a252cb46ba52788e3ed6887290340541cf758fd9fd0ed737bd5d4b4ff2ae2d3ba39263a949810c40eca96e4c1e

  • SSDEEP

    3072:PYO/ZMTFBNaoXzCwfVGpy5VlDFwBRPGhuSSQe:PYMZMBBNao+EVGpyp8pGh

Score
10/10
redline11

Malware Config

Extracted

Family

redline

Botnet

11

C2

51.89.201.21:7161

Attributes
  • auth_value

    e6aadafed1fda7723d7655a5894828d2

Targets

    • Target

      102992-143-0x0000000000800000-0x0000000000828000-memory.dmp

    • Size

      160KB

    • MD5

      1fa1b63bccd8ea881610f987a23fb4a3

    • SHA1

      fa26b70a6b2ce4ea6f0ae0200447172ef398dc9e

    • SHA256

      8afe98e70899165165b6f4665cecbb9f71af2a26091096c6095ed1ee66399cfa

    • SHA512

      cbb6f08b19c98391e4e338e0c374cefaffac98a252cb46ba52788e3ed6887290340541cf758fd9fd0ed737bd5d4b4ff2ae2d3ba39263a949810c40eca96e4c1e

    • SSDEEP

      3072:PYO/ZMTFBNaoXzCwfVGpy5VlDFwBRPGhuSSQe:PYMZMBBNao+EVGpyp8pGh

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks