Overview

overview

10

Static

static

10

668-97-0x0...ry.exe

windows7-x64

1

668-97-0x0...ry.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    668-97-0x0000000000260000-0x0000000000290000-memory.dmp

  • Size

    192KB

  • MD5

    b0653600395ab5987a4b61df3fd983ee

  • SHA1

    49b2a6e2ecd48447291a78bcef4c49a0c20bfe21

  • SHA256

    288e37288468bb1eb940c425f97488d2f546c02928950e842c588c17fac7c69a

  • SHA512

    a32cee3dbadfb6100fa3a7dcacc445e58780307b5b246451e8989d34a0e0e239d505b77f11dc1b807e63aa815bde07be70f8ac40cc26211c2c0e2d92ef934777

  • SSDEEP

    3072:XWYcGwly5Ci0oxNnGSbEUu/ggOW8e8hD:XGWB00ZqggOW

Score
10/10
gregaredline

Malware Config

Extracted

Family

redline

Botnet

grega

C2

83.97.73.130:19061

Attributes
  • auth_value

    16e2fbc2847b2270b3f0679e2dd76c8d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 668-97-0x0000000000260000-0x0000000000290000-memory.dmp
    .exe windows x86


    Headers

    Sections