Overview

overview

10

Static

static

10

1164-93-0x...ry.exe

windows7-x64

1164-93-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1164-93-0x0000000000BA0000-0x00000000015C0000-memory.dmp

  • Size

    10.1MB

  • MD5

    da33bddb40835db4178a5b23385fec7d

  • SHA1

    e418993a9f52681b01628c68fca27a389ff47cd7

  • SHA256

    6208af6239077d259c10abdcb7b03ab811af5c06796b6f4c9662ff42588c3584

  • SHA512

    24a800cfcb3822866099d5f23d6abe4f0d5f327a9c19517c1693b8f3fcfa9a25a332813acaf8bf51afa5427df67e92056d5a55f8b269a8b49405a8e3c0c5b1f3

  • SSDEEP

    196608:qq++bozH/1u/UXhWoZPNDKbdTcEy83Dl7O4u+5v//n:qq/sL/0WhW2BK5oB8tOL+Vn

Score
10/10
themidalogsdiller cloud (telegram: @logsdillabot)redline

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

51.210.161.21:36108

Attributes
  • auth_value

    c2955ed3813a798683a185a82e949f88

Signatures

  • Redline family
    redline
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida

Files

  • 1164-93-0x0000000000BA0000-0x00000000015C0000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections