Overview

overview

10

Static

static

10

3964-153-0...ry.exe

windows7-x64

1

3964-153-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3964-153-0x0000000000400000-0x0000000000428000-memory.dmp

  • Size

    160KB

  • MD5

    a4b816e6669ed0618dffa2653fa64227

  • SHA1

    112f5578af1f22c8b2a5ab971e61b9c65118c355

  • SHA256

    f09aed4abd3d8b89b35b1f1dcb6c36957c1e46d817e4e86c4764ae3711908917

  • SHA512

    edc815ce05712ecbc07aeab10fe89cd239c35ee7f181912c38aed5a5d84d02d8814e6ae24f6a95bb454e5f94ed8c8062c828b8a5b121993ad94912eb176d4b57

  • SSDEEP

    3072:TYO/ZMTFZFoI4T1prAvzDOroVsrDF1yRPlhXSSRP:TYMZMBZFoIOUnOnaplh

Score
10/10
newpatch13redline

Malware Config

Extracted

Family

redline

Botnet

newpatch13

C2

lanalannnal.xyz:81

Attributes
  • auth_value

    b3a5f8bc32de5f2abc4d5f99402f33ab

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline

Files

  • 3964-153-0x0000000000400000-0x0000000000428000-memory.dmp
    .exe windows x86


    Headers

    Sections