Overview

overview

10

Static

static

10

1548-97-0x...ry.exe

windows7-x64

1

1548-97-0x...ry.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1548-97-0x00000000002E0000-0x0000000000310000-memory.dmp

  • Size

    192KB

  • MD5

    bb9f48cd2a7d94be97dd64946cf19651

  • SHA1

    74fe0d193bae66f65825ea7427e6fa9b35611fd9

  • SHA256

    68c6628fa4ae1e974a0575abcccbda3ae457fc20f91c25be9bc0d88f59a466ed

  • SHA512

    e6a54d54880ab4067e34eee664756f3049dd581cc6f3c04eba40033c07e860b645fee4390a094f5fbfcb5e33dd96e3b7c81f7a4d317555a4f3dce6d1ed36a5af

  • SSDEEP

    3072:nWYcGwly5Ci0oxNnGSbEUu/ggOu8e8hD:nGWB00ZqggOu

Score
10/10
gregaredline

Malware Config

Extracted

Family

redline

Botnet

grega

C2

83.97.73.130:19061

Attributes
  • auth_value

    16e2fbc2847b2270b3f0679e2dd76c8d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1548-97-0x00000000002E0000-0x0000000000310000-memory.dmp
    .exe windows x86


    Headers

    Sections