Overview

overview

10

Static

static

10

556-141-0x...ry.exe

windows7-x64

556-141-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    556-141-0x0000000000250000-0x0000000000280000-memory.dmp

  • Size

    192KB

  • MD5

    449862bd0e6954c4fcd0caf2420df530

  • SHA1

    00d41ae27bee9f2cd34d7090aa059d67d4cd8439

  • SHA256

    f63a0dc7bdbb2071b7f0ed4b51008bd06873310a623e23ff6739bdd9667d002e

  • SHA512

    829d1a061e8dccf36890b28831b52acf4e4c1cb6ed4b23a76df42f87c2b499d4daebee9d45020fa5a404317ac502be14df5da983c94b52d33858f49a1f43e780

  • SSDEEP

    3072:2gtDiwyqSVghBGfAGtTjxNKifvWPxnD8e8hy:ribuhM5ZmnPxnD

Score
10/10
rovnoredline

Malware Config

Extracted

Family

redline

Botnet

rovno

C2

83.97.73.130:19061

Attributes
  • auth_value

    88306b072bfae0d9e44ed86a222b439d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 556-141-0x0000000000250000-0x0000000000280000-memory.dmp
    .exe windows x86


    Headers

    Sections