Overview

overview

10

Static

static

10

1636-155-0...ry.exe

windows7-x64

1

1636-155-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    1636-155-0x0000000000400000-0x000000000042A000-memory.dmp

  • Size

    168KB

  • MD5

    aebc9e761c1e6d38f8bf6906c74092a3

  • SHA1

    6171b8981b512987a85d15aef1fc92c80bd7bb37

  • SHA256

    aeec2ab4fbe25e73a8d8f30e5988761d8e523661ea5864d0f8c6da87d20907e8

  • SHA512

    9d47e3a20d87492d00cb64a5fee7292815fd7873f83e4488bdeec4929518ae3bacbeb6775347665b10f1ee229a14154ed2c544ecf7dd8c8e8da75150c23025b2

  • SSDEEP

    3072:WV+m5cVQmRSxuHjGJYWutpoU8hNZ18e8hH:Wj4B78hNf

Score
10/10
rozaredline

Malware Config

Extracted

Family

redline

Botnet

roza

C2

185.161.248.75:4132

Attributes
  • auth_value

    3e701c8c522386806a8f1f40a90873a7

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1636-155-0x0000000000400000-0x000000000042A000-memory.dmp
    .exe windows x86


    Headers

    Sections