Overview

overview

10

Static

static

10

304-97-0x0...ry.exe

windows7-x64

1

304-97-0x0...ry.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    304-97-0x0000000000250000-0x0000000000280000-memory.dmp

  • Size

    192KB

  • MD5

    1ca745699d6abf63a2f1b73b54f0441c

  • SHA1

    75d07e1dec3deb93485ec410bde628b79b6d4bf0

  • SHA256

    d0b6667cc581e10685ac5840d47f7bc66765b617e905326de124d90a43f2535b

  • SHA512

    af406d6fa4bfb2ea7f3e655207c5869aeb66b92bb8825e0735a217fcdbacbdb22e419752388beecee4dca4b7b153a10465cd54a8181a20a04253ded122f11f65

  • SSDEEP

    3072:GWYcGwly5Ci0oxNnGSbEUu/ggOD8e8hD:GGWB00ZqggOD

Score
10/10
gregaredline

Malware Config

Extracted

Family

redline

Botnet

grega

C2

83.97.73.130:19061

Attributes
  • auth_value

    16e2fbc2847b2270b3f0679e2dd76c8d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 304-97-0x0000000000250000-0x0000000000280000-memory.dmp
    .exe windows x86


    Headers

    Sections