Overview

overview

10

Static

static

10

1972-117-0...ry.exe

windows7-x64

1972-117-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1972-117-0x0000000000290000-0x00000000002C0000-memory.dmp

  • Size

    192KB

  • MD5

    52715ebd2a39ecf8fa4110e97b4a5ca3

  • SHA1

    60668dbee63f58a16e4ab67eea21a2f665a132d7

  • SHA256

    845f62d1c8ebc15965e506791c167805d9f842d5ce4a4870f2d16109819b9177

  • SHA512

    b3151a5495a16e81d4f061dabbc7750a8ab5077f2a7941bbf9a55e1fd3dd9c3a34d2b25b8d0278cc3100c55a059871badc0d00b26ab082a114e7a2df7d9a27ff

  • SSDEEP

    3072:2ytDiwyqSVghBGfAGtTjxNKifvWPxnX8e8hy:FibuhM5ZmnPxnX

Score
10/10
rovnoredline

Malware Config

Extracted

Family

redline

Botnet

rovno

C2

83.97.73.130:19061

Attributes
  • auth_value

    88306b072bfae0d9e44ed86a222b439d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1972-117-0x0000000000290000-0x00000000002C0000-memory.dmp
    .exe windows x86


    Headers

    Sections