Overview

overview

10

Static

static

10

1548-97-0x...ry.exe

windows7-x64

1

1548-97-0x...ry.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    1548-97-0x00000000002E0000-0x0000000000310000-memory.dmp

  • Size

    192KB

  • Sample

    230616-rtw2tsfd53

  • MD5

    bb9f48cd2a7d94be97dd64946cf19651

  • SHA1

    74fe0d193bae66f65825ea7427e6fa9b35611fd9

  • SHA256

    68c6628fa4ae1e974a0575abcccbda3ae457fc20f91c25be9bc0d88f59a466ed

  • SHA512

    e6a54d54880ab4067e34eee664756f3049dd581cc6f3c04eba40033c07e860b645fee4390a094f5fbfcb5e33dd96e3b7c81f7a4d317555a4f3dce6d1ed36a5af

  • SSDEEP

    3072:nWYcGwly5Ci0oxNnGSbEUu/ggOu8e8hD:nGWB00ZqggOu

Score
10/10
redlinegregamicrosoftphishing

Malware Config

Extracted

Family

redline

Botnet

grega

C2

83.97.73.130:19061

Attributes
  • auth_value

    16e2fbc2847b2270b3f0679e2dd76c8d

Targets

    • Target

      1548-97-0x00000000002E0000-0x0000000000310000-memory.dmp

    • Size

      192KB

    • MD5

      bb9f48cd2a7d94be97dd64946cf19651

    • SHA1

      74fe0d193bae66f65825ea7427e6fa9b35611fd9

    • SHA256

      68c6628fa4ae1e974a0575abcccbda3ae457fc20f91c25be9bc0d88f59a466ed

    • SHA512

      e6a54d54880ab4067e34eee664756f3049dd581cc6f3c04eba40033c07e860b645fee4390a094f5fbfcb5e33dd96e3b7c81f7a4d317555a4f3dce6d1ed36a5af

    • SSDEEP

      3072:nWYcGwly5Ci0oxNnGSbEUu/ggOu8e8hD:nGWB00ZqggOu

    Score
    5/10
    microsoftphishing
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks