Overview

overview

10

Static

static

10

1856-126-0...ry.exe

windows7-x64

1856-126-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1856-126-0x0000000000090000-0x00000000000BA000-memory.dmp

  • Size

    168KB

  • MD5

    06858633eaa9b9bf8729e2e85516c772

  • SHA1

    1b00f3175bea3d3e1db8ea93dbce7663a02922ef

  • SHA256

    120b3f460c2a8d2ef00288d36c31ed02a95d04a0da1d767e0e80b4742c60e5c1

  • SHA512

    b15a99dd57bfa615ee20fa78e42a14bd3477b3f33d3a73a086307560e94c977d4ae28937ced8b648565c37e705e90a3278d3ebe5fdb45a34fd9ea1f3176f5d0f

  • SSDEEP

    3072:3V+m5cDQmRSgEKWx11nUBEYPAlhcZO8e8h5:3j6KAWlhcQ

Score
10/10
gogaredline

Malware Config

Extracted

Family

redline

Botnet

goga

C2

83.97.73.122:19062

Attributes
  • auth_value

    6d57dff6d3c42dddb8a76dc276b8467f

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1856-126-0x0000000000090000-0x00000000000BA000-memory.dmp
    .exe windows x86


    Headers

    Sections