Overview

overview

10

Static

static

10

920-56-0x0...ry.exe

windows7-x64

920-56-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    920-56-0x0000000000400000-0x0000000000432000-memory.dmp

  • Size

    200KB

  • MD5

    45a032959e20505a2ba08d7352d48e50

  • SHA1

    982b6510a80ddec18e1976386019a47bf6d3c72e

  • SHA256

    36dae8b260e96819b944e499fd43fc9612ab55705598553971626f6b3683ef9a

  • SHA512

    b09172383666b04b55bf3dbd61e5128f3c3b234831ff3b7647730e2d12c7eccf0226b377a81dee6214c4e7dc4f1f42a45516ac6b5ea99b74731625b4713c5840

  • SSDEEP

    3072:5xqZWhhaWUGA3UC7xSeJyez193hUfxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jd:rqZCDC7xLJx3h

Score
10/10
@nickosuwuredline

Malware Config

Extracted

Family

redline

Botnet

@nickosUWU

C2

ofriaransim.shop:80

Attributes
  • auth_value

    f9469d78ab597c8199703cb369b4e75f

Signatures

Files

  • 920-56-0x0000000000400000-0x0000000000432000-memory.dmp
    .exe windows x86


    Headers

    Sections