Overview

overview

10

Static

static

10

3232-120-0...ry.exe

windows7-x64

10

3232-120-0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3232-120-0x0000000004BB0000-0x0000000004C06000-memory.dmp

  • Size

    344KB

  • MD5

    faaccb10f429fbbd6621a43befc816e1

  • SHA1

    a5939787c9143674058b685b57bfb59c25eac255

  • SHA256

    82fa554437a0bfc996eaea65c5ddc73c4d0fd2c98f8151852c20a1a41fe83c74

  • SHA512

    d8bb2e2048c09200de9bd7b8daf5254392e4fb0430b387ad07cf876e464ddf603f6f3e8f1e683fda1892fad6db09deaa3f402247555136a38bcd6769758a0dfe

  • SSDEEP

    1536:GSSWLq5TgceqTkSw1zuaJFs1+Kv3DF2iYYoRy2GYMoVXLgUbYvg0r+ipEhHp69eB:suU2iaJudTF23/TGSLh5yn2a4kArB

Score
10/10
frtrackredline

Malware Config

Extracted

Family

redline

Botnet

frtrack

C2

francestracking.com:80

Attributes
  • auth_value

    f2f94b780071d26409283a3478312faf

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline

Files

  • 3232-120-0x0000000004BB0000-0x0000000004C06000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections