Overview

overview

10

Static

static

10

1220-54-0x...ry.exe

windows7-x64

1220-54-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1220-54-0x0000000001B60000-0x0000000001B90000-memory.dmp

  • Size

    192KB

  • Sample

    230613-b68ndsed67

  • MD5

    f0f94b74077cb3ec03ef26821b888e48

  • SHA1

    dab6eca6901b7200728c91526622c3465d184f34

  • SHA256

    b2e837dd80a4a743673cedf1821e196d101d99c4e30065b768375be7a9a3fdc8

  • SHA512

    0c1ecf73331692381129ae14ecd4f94d865dc72191b55f2f4791b426ae4db71ce6a31d13d5d61131e43a0030056929dd7808f43ca23bcf34e80c7fdac3f89178

  • SSDEEP

    1536:8XzGzxuk36sv0W7TscooTrH6TuUa809jL1axN8oYQ/1buuatDaUFewS0GkR/8e8F:8Xq8WHmiVrBaxNagg5aUFewS48e8hX

Score
10/10
redlineboris

Malware Config

Extracted

Family

redline

Botnet

boris

C2

83.97.73.129:19068

Attributes
  • auth_value

    205e4fccc0f8c7da1d56fb1da4ac5e6a

Targets

    • Target

      1220-54-0x0000000001B60000-0x0000000001B90000-memory.dmp

    • Size

      192KB

    • MD5

      f0f94b74077cb3ec03ef26821b888e48

    • SHA1

      dab6eca6901b7200728c91526622c3465d184f34

    • SHA256

      b2e837dd80a4a743673cedf1821e196d101d99c4e30065b768375be7a9a3fdc8

    • SHA512

      0c1ecf73331692381129ae14ecd4f94d865dc72191b55f2f4791b426ae4db71ce6a31d13d5d61131e43a0030056929dd7808f43ca23bcf34e80c7fdac3f89178

    • SSDEEP

      1536:8XzGzxuk36sv0W7TscooTrH6TuUa809jL1axN8oYQ/1buuatDaUFewS0GkR/8e8F:8Xq8WHmiVrBaxNagg5aUFewS48e8hX

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks