Overview

overview

10

Static

static

10

2040-56-0x...ry.exe

windows7-x64

2040-56-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2040-56-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    d2436324cdcdb384acfa3e517e10979f

  • SHA1

    c1fe78197a032f5230b62034b5fa8bb6eaff26eb

  • SHA256

    d5fbd7543a1ef3e123dcb0299f577ff314cc481532e08032c4d9b4911c823137

  • SHA512

    a717dfb29e105200dd6b2933b28b69221f840349e5e268fe2b534d59cc97bf8a350d21e2d94c4885b12da6585e5db43870771bc443fd113e79ce68f80d00c8dc

  • SSDEEP

    1536:lQQQqlVZRGWkNFrfZ9mVRYALATeTGqVQbudZvPB1i+7s83wYki8e8hM:lLOF4VX+qVgCvZ1ims88e8hM

Score
10/10
@cosmiccloudadminredline

Malware Config

Extracted

Family

redline

Botnet

@COSMICCLOUDADMIN

C2

20.226.69.130:30497

Attributes
  • auth_value

    0c9b7221bd50ac4f7beb692ba88b2c78

Signatures

Files

  • 2040-56-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows x86


    Headers

    Sections