Overview

overview

10

Static

static

10

628-97-0x0...ry.exe

windows7-x64

628-97-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    628-97-0x0000000000440000-0x0000000000470000-memory.dmp

  • Size

    192KB

  • MD5

    66123a1bde69a07dab8683ef498e2a61

  • SHA1

    d4d2f542087abb3992dbe5d18d0cd51d516b55ba

  • SHA256

    f03790a1dc46ec5f32666d6c5f39ee03f0e0fa537ffcb504b979973b8ce0d045

  • SHA512

    fa57dbb927a759d5d268ed1196bdf49c2373b6112b1be9974a0f35457399ab1f7d874891417b40c21144ad822483d126700c18959ffcd21559d97c4d29656b02

  • SSDEEP

    1536:BXzGzxuk36sv0W7TscooTrH6TuUa809jL1axN8oYQ/1buuatDaUFewS0GkR88e8F:BXq8WHmiVrBaxNagg5aUFewSv8e8hX

Score
10/10
borisredline

Malware Config

Extracted

Family

redline

Botnet

boris

C2

83.97.73.129:19068

Attributes
  • auth_value

    205e4fccc0f8c7da1d56fb1da4ac5e6a

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 628-97-0x0000000000440000-0x0000000000470000-memory.dmp
    .exe windows x86


    Headers

    Sections