Overview

overview

10

Static

static

10

1552-98-0x...ry.exe

windows7-x64

10

1552-98-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1552-98-0x0000000002340000-0x0000000002384000-memory.dmp

  • Size

    272KB

  • MD5

    8eb20a8f86caff4d58532dfbad6cdd29

  • SHA1

    a0eb0d13b2d9809934ad5fa61911ebe645fe9d63

  • SHA256

    70c9832f650b18c7a47afddcf726cd9fb997db82f0cc296c2e80dc41c7c8fa47

  • SHA512

    b4fd112b0339ac0f2357cfaec52c5be2757f22310215b3d7d7c6bda4a3c647b09d038a3864e556e4a1581543df2d3c7f0c757fd5520a65b77451d02013dd9e02

  • SSDEEP

    3072:B6jIELf6FDTCLkYxJw6qxYgcgpiiSo40jm8dAhTrnz5XD1NxNn2pU9f2MKTV/wi0:B6jodYx9cYKpzwAAh3nz1

Score
10/10
rumaredline

Malware Config

Extracted

Family

redline

Botnet

ruma

C2

193.233.20.13:4136

Attributes
  • auth_value

    647d00dfaba082a4a30f383bca5d1a2a

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline

Files

  • 1552-98-0x0000000002340000-0x0000000002384000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections