Overview

overview

10

Static

static

10

820-110-0x...ry.exe

windows7-x64

10

820-110-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    820-110-0x0000000002250000-0x0000000002294000-memory.dmp

  • Size

    272KB

  • MD5

    82d03af59b1d33955879eaee73d37b34

  • SHA1

    02361b2ac02c53be3ade2d1f680b4d97453ce4d5

  • SHA256

    28a53c20e8150c3f03fd10864122da20b4e1f582bd58e73aaabc537eee270904

  • SHA512

    13ce138d5994d62fb9408632ad53aca4167360c566cf2aa91dcd69f7dd23e6722c5e4d1b5117378062d1213ea09dcff91f94e1d1a297cbf6f59e0c2fd4df9797

  • SSDEEP

    3072:p6j4ELH6Vt7CENpmh6sLKR+utY/edHbpiWo40mTJghm0nlQoYKgQmExNn2pU9f28:p6jgppZsLKwuAexbpZghdnlQH5Q

Score
10/10
romikredline

Malware Config

Extracted

Family

redline

Botnet

romik

C2

193.233.20.12:4132

Attributes
  • auth_value

    8fb78d2889ba0ca42678b59b884e88ff

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline

Files

  • 820-110-0x0000000002250000-0x0000000002294000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections