Overview

overview

10

Static

static

10

1636-291-0...ry.exe

windows7-x64

1

1636-291-0...ry.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    1636-291-0x0000000000590000-0x00000000005C0000-memory.dmp

  • Size

    192KB

  • MD5

    b9c37d6f9b4da8beb2dcc1e3be0e08b6

  • SHA1

    de342cab8b6c16379156e6fe22592a9cadc91240

  • SHA256

    9e6dc4921110600033b9e5635a7edee957e4f6ad01cce2d8bd2543f86bddf7c3

  • SHA512

    a6704f6295a3b4c03590455392cecf5db4bd9ed92fdf7ed24cd77efe6da3585feb30f9cce030458ad2a4323f6051eac543da13ab69d518ef5f27b3d4186ef443

  • SSDEEP

    1536:3hbEey6y36sv0W7TDGOIrHuyk7xk2W5/uGxNFVYQffbuclGHQ4N0GkRE8e8h3:3lEebE6Cyk9i5/uGxNMS3azNX8e8h3

Score
10/10
brunoredline

Malware Config

Extracted

Family

redline

Botnet

bruno

C2

83.97.73.134:19071

Attributes
  • auth_value

    b23e240c277e85ce9d49d6165c0a2b48

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1636-291-0x0000000000590000-0x00000000005C0000-memory.dmp
    .exe windows x86


    Headers

    Sections