Overview

overview

10

Static

static

10

1884-97-0x...ry.exe

windows7-x64

1

1884-97-0x...ry.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    1884-97-0x0000000000330000-0x0000000000360000-memory.dmp

  • Size

    192KB

  • MD5

    d46bf4171a2ee29c2f5c02d7c06e06bc

  • SHA1

    0c2c2e1a3bbc78a1de91bb7a3a0b9174bb73e3cf

  • SHA256

    76a05ac6f3b4411637cbc5246dd3be1cd732663acc0c4c981138cc6b37f5d0e1

  • SHA512

    4bcf92140124c856087e0c0ecf471984c90e2f981d486626ea049d8ae292a5d1796c4cfc9f8257a5db202779ab6689111de023440b037df03e8c3bd3e02aa14e

  • SSDEEP

    1536:QhbEey6y36sv0W7TDGOIrHuyk7xk2W5/uGxNFVYQffbuclGHQ4N0GkR68e8h3:QlEebE6Cyk9i5/uGxNMS3azNl8e8h3

Score
10/10
brunoredline

Malware Config

Extracted

Family

redline

Botnet

bruno

C2

83.97.73.134:19071

Attributes
  • auth_value

    b23e240c277e85ce9d49d6165c0a2b48

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1884-97-0x0000000000330000-0x0000000000360000-memory.dmp
    .exe windows x86


    Headers

    Sections