Overview

overview

10

Static

static

10

408-334-0x...ry.exe

windows7-x64

408-334-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    408-334-0x0000000000800000-0x0000000000828000-memory.dmp

  • Size

    160KB

  • MD5

    6d3debdfb717f0793952612f7f448fba

  • SHA1

    48ec798a66c496a0774c6fcc98d3668178f3fd63

  • SHA256

    6da64aa7d896f837907723a8841672fd37169ee7a8a1c50927550dc6565d4f90

  • SHA512

    8d62763a8c73d7855fefed59b76abbb2d96a67a3576ca4475efd8381bc0e67ab1c47bbf41a59cb76d025c1117bf5851a97b68bca1414be1be714c7d4594101dc

  • SSDEEP

    3072:uYO/ZMTFzD64o7KzEnpoNuVzDFkyePjhGSSk6r:uYMZMBzD64pInpoNeN+jhw

Score
10/10
slovarik15btcredline

Malware Config

Extracted

Family

redline

Botnet

slovarik15btc

C2

78.153.144.3:2510

Attributes
  • auth_value

    bfedad55292538ad3edd07ac95ad8952

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline

Files

  • 408-334-0x0000000000800000-0x0000000000828000-memory.dmp
    .exe windows x86


    Headers

    Sections