Overview

overview

10

Static

static

10

668-97-0x0...ry.exe

windows7-x64

1

668-97-0x0...ry.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    668-97-0x0000000000250000-0x0000000000280000-memory.dmp

  • Size

    192KB

  • MD5

    527bd26a1a05891e91943775d190aab3

  • SHA1

    2158e5f87baaab2d0d3d7b2af2bdb6474449b96f

  • SHA256

    99d5941b81b745dfca82eadc68088db485d1be9729821aaf766c58777e5a0a94

  • SHA512

    6a97e5a85a7d707d3f4bb866e6923498ed96aab7495263c23918b7851bd883e5fc3ac6db144afd47c462e89a194297b8e264a9556182d2fd8942adcd3c6fbfcf

  • SSDEEP

    3072:XWYcGwly5Ci0oxNnGSbEUu/ggOD8e8hD:XGWB00ZqggOD

Score
10/10
gregaredline

Malware Config

Extracted

Family

redline

Botnet

grega

C2

83.97.73.130:19061

Attributes
  • auth_value

    16e2fbc2847b2270b3f0679e2dd76c8d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 668-97-0x0000000000250000-0x0000000000280000-memory.dmp
    .exe windows x86


    Headers

    Sections