Overview

overview

10

Static

static

10

1240-83-0x...ry.exe

windows7-x64

1240-83-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1240-83-0x0000000000400000-0x0000000000426000-memory.dmp

  • Size

    152KB

  • MD5

    896443ec681546ec420a2b381c5639c0

  • SHA1

    8d9eae914ecec5ab7bf6e00e21fac9de49045277

  • SHA256

    0004cf0db340b5649e5f90728bdb10b308dbdf7325f7c69cf4015f18a89e723c

  • SHA512

    bcf4a98f51665612e6e26b712489d52597388b09752faf801c71f232a2ff7dd19a185a4107d32fb8d241089d9ea12c6f47a193652ed45ac501f59781f7da74dd

  • SSDEEP

    1536:waIcnVHT1K/o/KJMM+feYYkw/X/SQmDVBi/hYjZQbV7w/OdLGsYgibfbFDKsRM:lIcZZCqGYY/XHmjEygqGtYgafJlM

Score
10/10
barret2606redline

Malware Config

Extracted

Family

redline

Botnet

Barret2606

C2

168.119.239.218:36938

Attributes
  • auth_value

    344d2ed02c1a6675701a7c3ab5c4c12e

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1240-83-0x0000000000400000-0x0000000000426000-memory.dmp
    .exe windows x86


    Headers

    Sections