Overview

overview

10

Static

static

10

1344-97-0x...ry.exe

windows7-x64

1

1344-97-0x...ry.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1344-97-0x0000000000250000-0x0000000000280000-memory.dmp

  • Size

    192KB

  • MD5

    3e2f63dc54e663b3662020e3b5251597

  • SHA1

    998eb4b677bc0a1e2a23463925166cb6075b6cb4

  • SHA256

    97e8b2ed885e0fcf530397bbb8b2110530e0120120f46f618eff6c979d350aa7

  • SHA512

    41878d6d43b505582119ea728f5ac7a7316db65e74c568b137dcee33878d99160b3ec4039ac8b82cfb6f135d7b6b0bebfb90b122139fdc10b2e1baf75045dabb

  • SSDEEP

    3072:YWYcGwly5Ci0oxNnGSbEUu/ggOD8e8hD:YGWB00ZqggOD

Score
10/10
gregaredline

Malware Config

Extracted

Family

redline

Botnet

grega

C2

83.97.73.130:19061

Attributes
  • auth_value

    16e2fbc2847b2270b3f0679e2dd76c8d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1344-97-0x0000000000250000-0x0000000000280000-memory.dmp
    .exe windows x86


    Headers

    Sections