Overview

overview

10

Static

static

10

2028-56-0x...ry.exe

windows7-x64

2028-56-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2028-56-0x0000000000400000-0x0000000000432000-memory.dmp

  • Size

    200KB

  • MD5

    2c9ce92625e9e39bebef5dc146a4ef6f

  • SHA1

    d9292745081356dc2fbd28c8da077ec43c4ea121

  • SHA256

    414ebc96eabc66e7779997b15248d8261493c6dfee84b5927a77652bf83902fb

  • SHA512

    a2fd5711d3b34d8eac3f5f8d6e352d99c1565c987375cf01da010e4bd85e7c02db8dffb6dbc20be628b6645672de7ef9fda29398d286446ba9670c479247387a

  • SSDEEP

    3072:zxqZWl9abUP0PZF08ZlXNe0iFdh1LxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jJ:FqZBbNZ+dh

Score
10/10
3redline

Malware Config

Extracted

Family

redline

Botnet

3

C2

65.21.5.58:24911

Attributes
  • auth_value

    348157ad6abeedf1edf0b65752dea46b

Signatures

Files

  • 2028-56-0x0000000000400000-0x0000000000432000-memory.dmp
    .exe windows x86


    Headers

    Sections