Overview

overview

10

Static

static

10

2652-290-0...ry.exe

windows7-x64

2652-290-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2652-290-0x0000000000080000-0x00000000000A8000-memory.dmp

  • Size

    160KB

  • MD5

    9b0fbae3204af9370cb690af185aa429

  • SHA1

    cea0941819092b4c2a37eb90706d0398d663148a

  • SHA256

    2b57e7c9db017d9d6c3172017289f293e8f1dbdb66d9166281e86b3864853b5c

  • SHA512

    19a12c21d5db62e387f171497c8cb80ec68ca8aa44862e3a85f2dd83c70db57eb763fada48d81ff97b5b46b0c76dad59cf1625b93e888139431965ec22649b8c

  • SSDEEP

    3072:GYO/ZMTFxtgoYzdxm02WGy5UVViDFzyRPZhCSSIx:GYMZMBxtgomE02Wv5UKMpZh

Score
10/10
walhallaredline

Malware Config

Extracted

Family

redline

Botnet

walhalla

C2

79.137.192.41:24746

Attributes
  • auth_value

    33d116d7be31f30e8503e76ee70b67a1

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline

Files

  • 2652-290-0x0000000000080000-0x00000000000A8000-memory.dmp
    .exe windows x86


    Headers

    Sections