Overview

overview

10

Static

static

10

840-97-0x0...ry.exe

windows7-x64

840-97-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    840-97-0x0000000000270000-0x00000000002A0000-memory.dmp

  • Size

    192KB

  • Sample

    230612-sw1cpscg58

  • MD5

    4e8b4ab30b69b1b59cb72074dbc79e6f

  • SHA1

    cf0ca3e26f4a8e51c3b8a329d8227ab7ee2d05f6

  • SHA256

    76a3e47e0399a8348fff0d1cfcb7f4df9cfba3103eb4a17224751fc4f14bc6db

  • SHA512

    25f88796bc32e1f9107f8c066024a7d0ef975cfd7c8a13d841c524e7c6077f5abeb6d3e27a14ddb861179d772d1b8c70471f54f5a92bbae026453b6e2b78ab24

  • SSDEEP

    1536:YXzGzxuk36sv0W7TscooTrH6TuUa809jL1axN8oYQ/1buuatDaUFewS0GkRd8e8F:YXq8WHmiVrBaxNagg5aUFewSy8e8hX

Score
10/10
redlineboris

Malware Config

Extracted

Family

redline

Botnet

boris

C2

83.97.73.129:19068

Attributes
  • auth_value

    205e4fccc0f8c7da1d56fb1da4ac5e6a

Targets

    • Target

      840-97-0x0000000000270000-0x00000000002A0000-memory.dmp

    • Size

      192KB

    • MD5

      4e8b4ab30b69b1b59cb72074dbc79e6f

    • SHA1

      cf0ca3e26f4a8e51c3b8a329d8227ab7ee2d05f6

    • SHA256

      76a3e47e0399a8348fff0d1cfcb7f4df9cfba3103eb4a17224751fc4f14bc6db

    • SHA512

      25f88796bc32e1f9107f8c066024a7d0ef975cfd7c8a13d841c524e7c6077f5abeb6d3e27a14ddb861179d772d1b8c70471f54f5a92bbae026453b6e2b78ab24

    • SSDEEP

      1536:YXzGzxuk36sv0W7TscooTrH6TuUa809jL1axN8oYQ/1buuatDaUFewS0GkRd8e8F:YXq8WHmiVrBaxNagg5aUFewSy8e8hX

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks