Overview

overview

10

Static

static

10

1924-992-0...ry.exe

windows7-x64

1924-992-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1924-992-0x0000000000400000-0x0000000000426000-memory.dmp

  • Size

    152KB

  • MD5

    bfa98e623ca4681cc54932c611f2fa31

  • SHA1

    461bf69defdf682178f71c9b64f4d620dd7b3490

  • SHA256

    ef37a162d031dfae944db781cd4441be3738161b3c96c2db0cab4555a0cbfc1b

  • SHA512

    e823d5405d8e3a6e5657683a24b426fbdc74f7e192f66971d8fd419679c580c3dac44e2f8920f2640b71c76515ab61d67a5e684513f3ad4ee2a9bc6cd0309db8

  • SSDEEP

    1536:Za+cnVHT1C/o78p4g+fXCvNKhu/17bCB1ihmj/LbV7j/5aNSsYgibfbFDKsRx:0+cZZ46PCvtVSie39hqYgafJlx

Score
10/10
stellaredline

Malware Config

Extracted

Family

redline

Botnet

stella

C2

dragonlimb.com:80

Attributes
  • auth_value

    5a6c12c292e8616b78bc3c555dd1007e

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1924-992-0x0000000000400000-0x0000000000426000-memory.dmp
    .exe windows x86


    Headers

    Sections