Overview

overview

10

Static

static

10

1424-56-0x...ry.exe

windows7-x64

10

1424-56-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1424-56-0x00000000041D0000-0x0000000004204000-memory.dmp

  • Size

    208KB

  • MD5

    d53a8884e634ac2b674c36b4b4d9ee3d

  • SHA1

    3e8e769efc7da88be847a9ca2319a7d442019074

  • SHA256

    edc14c2284fef0b1f2bca987464bd579dc1b8f10e2ac1a6ff43da1c6a5af8484

  • SHA512

    d5ea0b9720954e118950b5783a463bd0328bacc38cdbc133378dff1a576254f24b10f289e6f8b66dadd8490596721787b57e159e73c952f8fff3f3029dba2af9

  • SSDEEP

    3072:HubLREuUb3rOuIEfSRmjDmAYyoWIvJ4FgbfHM8e8hH:ObLR+WEqRmOAHoWIvJrvM

Score
10/10
logsdiller cloud (telegram: @logsdillabot)redline

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

147.135.231.58:23368

Attributes
  • auth_value

    c2955ed3813a798683a185a82e949f88

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1424-56-0x00000000041D0000-0x0000000004204000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections