Overview

overview

10

Static

static

10

1952-113-0...ry.exe

windows7-x64

10

1952-113-0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1952-113-0x0000000002430000-0x0000000002474000-memory.dmp

  • Size

    272KB

  • MD5

    6e156c4d5102776b88fe2580e79711d4

  • SHA1

    5f1dd5ed0cf73c99b56c71f4f169c7fb2e201231

  • SHA256

    990f50882c05d7f013f97596dfb7714d97860e79fac15a53dd5ed9918395d0b8

  • SHA512

    d45ec2a3147f7f7028c52bc47378ab2b38cafbe6e70580dda2cc826971996c3cf8d7f70ab4948f90d42550ed53e2804b2642a578e6488ae90c87cc229db3249f

  • SSDEEP

    3072:B6jIELf6FDTCLkYxJw6qxYgcgpiiSo40jm8dAhTrnz5XD1NxNn2pU9f2MKTV/wig:B6jodYx9cYKpzwAAh3nz

Score
10/10
rumaredline

Malware Config

Extracted

Family

redline

Botnet

ruma

C2

193.233.20.13:4136

Attributes
  • auth_value

    647d00dfaba082a4a30f383bca5d1a2a

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline

Files

  • 1952-113-0x0000000002430000-0x0000000002474000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections