Overview

overview

10

Static

static

10

1488-117-0...ry.exe

windows7-x64

1488-117-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1488-117-0x00000000002E0000-0x0000000000310000-memory.dmp

  • Size

    192KB

  • MD5

    5c0937ba34fceb3250dc7ccc33ad3fb3

  • SHA1

    1377fcd664f186d5deb70a6b14828fb9f057d384

  • SHA256

    a6b73509dce3a40c4dc0b5a84a9a7a111cbac8bf005daeeb4d23a52515eb35c5

  • SHA512

    90397b11264151955a06617de47bdb4fa0ba707e69534e4cbbe0e0e4180717a89c0df8e1cc49ca5abb571e785085979371dc1fc0f64ea306321411a7852db10b

  • SSDEEP

    3072:2YtDiwyqSVghBGfAGtTjxNKifvWPxnu8e8hy:jibuhM5ZmnPxnu

Score
10/10
rovnoredline

Malware Config

Extracted

Family

redline

Botnet

rovno

C2

83.97.73.130:19061

Attributes
  • auth_value

    88306b072bfae0d9e44ed86a222b439d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1488-117-0x00000000002E0000-0x0000000000310000-memory.dmp
    .exe windows x86


    Headers

    Sections