Overview

overview

10

Static

static

10

580-118-0x...ry.exe

windows7-x64

580-118-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    580-118-0x0000000000280000-0x00000000002B0000-memory.dmp

  • Size

    192KB

  • MD5

    fd339a6cdffb805a96643be71471e5f5

  • SHA1

    a5de885c955b4753f44606e28c0eac9b208eee77

  • SHA256

    5a8a828ad6e48c588d36a5c6af7007a9aa0714746b1aecf0fd86129c280de61c

  • SHA512

    bdced591f1936b57f4be82a0177346c343928b1b1c97fc586d62a51bf01ad023a651fa9ab7f5a186dec1a31278630eaada20adf84f7b57f06149c81ab1769e91

  • SSDEEP

    3072:2rtDiwyqSVghBGfAGtTjxNKifvWPxn88e8hy:UibuhM5ZmnPxn8

Score
10/10
rovnoredline

Malware Config

Extracted

Family

redline

Botnet

rovno

C2

83.97.73.130:19061

Attributes
  • auth_value

    88306b072bfae0d9e44ed86a222b439d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 580-118-0x0000000000280000-0x00000000002B0000-memory.dmp
    .exe windows x86


    Headers

    Sections