Overview

overview

10

Static

static

10

944-124-0x...ry.exe

windows7-x64

10

944-124-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    944-124-0x00000000023F0000-0x0000000002434000-memory.dmp

  • Size

    272KB

  • MD5

    26857dff7515a7d791a6e6dd487c022c

  • SHA1

    ad2ca49221ed0a3f19b1c9380ab8301d80a068e3

  • SHA256

    a73cfe3999c47728dad35edf85c8bde6a420923d599a1d0ca875a18542dac3b4

  • SHA512

    f116e0316dd0e7d0fde1854778cbadfd01c8a054094bc3de11788a4711068be95afe7594d68c8b73a20e7397b92608b915106dd798d21772af21553e8cb27498

  • SSDEEP

    3072:N6j4ELN6FY9C7zhf5hwVsmLoQYXJvLc99no40SEBShApnIlJJg6xNn2pU9f2MKT4:N6jidf5hwlLoJvLcPyShSnId

Score
10/10
rouchredline

Malware Config

Extracted

Family

redline

Botnet

rouch

C2

193.56.146.11:4162

Attributes
  • auth_value

    1b1735bcfc122c708eae27ca352568de

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline

Files

  • 944-124-0x00000000023F0000-0x0000000002434000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections