Overview

overview

10

Static

static

10

1284-126-0...ry.exe

windows7-x64

1

1284-126-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1284-126-0x00000000000B0000-0x00000000000DA000-memory.dmp

  • Size

    168KB

  • MD5

    098f46ab82e55a62c1df109dadea25ab

  • SHA1

    4a59fcced2e76657bbb60f80060d7e6d96056cce

  • SHA256

    9cc3e73c659128c5876a4cf77bdda088ac5cea17a88b574f55494e3bbbf1d034

  • SHA512

    ca4465dd0b829a909b16b51e2667c70e1926942982f0e299d760ee54c54b8cf12452aa73397dcb585c5ffb70e1ad8263842d3cf5b16ae79c62d5732475e3abf9

  • SSDEEP

    3072:kV+m5c/QmRSNp2Tm1bENx3Gh6Z08e8hU:kj2w+nGh6i

Score
10/10
gregredline

Malware Config

Extracted

Family

redline

Botnet

greg

C2

83.97.73.122:19062

Attributes
  • auth_value

    4c966a90781c6b4ab7f512d018696362

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1284-126-0x00000000000B0000-0x00000000000DA000-memory.dmp
    .exe windows x86


    Headers

    Sections