Overview

overview

10

Static

static

10

1524-93-0x...ry.exe

windows7-x64

10

1524-93-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1524-93-0x0000000002490000-0x00000000024D4000-memory.dmp

  • Size

    272KB

  • MD5

    e6dbee7b4be162dc43213bdab0182117

  • SHA1

    064224f99aed50740f4d7df779a34209bdaa8fc6

  • SHA256

    2edb8d75380e92a2fa084ff745a1d9351a099aa954bebd1143e6f6d589551486

  • SHA512

    dce1f7732773e800e59e9deb08636f6c1ef74f08e6ff7cc1399e8d2bd199e7da8a361ccb77f2173cea511ad72507f3ff7eea294dfab58895125f800474492363

  • SSDEEP

    3072:B6jIELf6FDTCLkYxJw6qxYgcgpiiSo40jm8dAhTrnz5XD1NxNn2pU9f2MKTV/wig:B6jodYx9cYKpzwAAh3nz

Score
10/10
rumaredline

Malware Config

Extracted

Family

redline

Botnet

ruma

C2

193.233.20.13:4136

Attributes
  • auth_value

    647d00dfaba082a4a30f383bca5d1a2a

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline

Files

  • 1524-93-0x0000000002490000-0x00000000024D4000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections