Overview

overview

10

Static

static

10

1108-138-0...ry.exe

windows7-x64

10

1108-138-0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1108-138-0x0000000002120000-0x0000000002164000-memory.dmp

  • Size

    272KB

  • MD5

    821eeaeabb1953ca26bc84e37c7db884

  • SHA1

    7145504cf4d4b97e9766844fdfde4abf1812badd

  • SHA256

    9f19ed7c2dd317333a4944d0a56f0123755cc7d94df8c97e95ca07d9968914bc

  • SHA512

    4e35d7aaf48b1cf2d4c7960f8eda941b9fbb02f7117c6d3b03cceea579442220ddabe422cae6852286d2003085aaffb3d6840619eea7aa5f36d2bd80f1b97220

  • SSDEEP

    3072:Yy6joELH6Vt7CsfMvJq9pGzEM+wCFJDC+glo40jLcKhJqnFLpxNn2pU9f2MKTV/u:Yy6jwbfMvo9pjM+wCFZJsKhYn

Score
10/10
rostoredline

Malware Config

Extracted

Family

redline

Botnet

rosto

C2

hueref.eu:4162

Attributes
  • auth_value

    07d81eba8cad42bbd0ae60042d48eac6

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline

Files

  • 1108-138-0x0000000002120000-0x0000000002164000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections