Overview

overview

10

Static

static

10

1552-56-0x...ry.exe

windows7-x64

10

1552-56-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1552-56-0x0000000002780000-0x00000000027D8000-memory.dmp

  • Size

    352KB

  • MD5

    2f7f073a990406354e5490c95a7d0f57

  • SHA1

    189d42f64925b46602f5d50cd988720d288a70c4

  • SHA256

    f881fafe44a0f452de1603f8ba821b030e044aeaee43d4fdb8aa09110984f3c4

  • SHA512

    a22e6224700e89b1c26ffa46e41ad5f84f23c7bef58f0c68983ecb87515fa11eca6fa166744bdae479e2dae0685151c77272cb4aba62b997d9aacbf417d5574b

  • SSDEEP

    3072:gI9J4USyS7lNlpy+BKWL7z/gYiF/YqLwSLS4moQfB8iS3kAri:gI90y+flY+BKyQGoKmkA

Score
10/10
@germanyredline

Malware Config

Extracted

Family

redline

Botnet

@Germany

C2

185.11.61.125:22344

Attributes
  • auth_value

    9d15d78194367a949e54a07d6ce02c62

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline

Files

  • 1552-56-0x0000000002780000-0x00000000027D8000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections