Overview

overview

10

Static

static

10

1116-97-0x...ry.exe

windows7-x64

1

1116-97-0x...ry.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    1116-97-0x0000000000310000-0x0000000000340000-memory.dmp

  • Size

    192KB

  • MD5

    f14513d4dfe548a094ec743219a69b96

  • SHA1

    9e8a296800edc316e10d410ab0438de79b6a51f4

  • SHA256

    3c6e15f14f675306bd1922c0ae39ecf81a77b08f3e13fe298daeaf55b5cccf07

  • SHA512

    2b94f995e6b5e433a22ef71941b09e22c422f70ca234cfcdfc8afed303c811999adc17734d60beec07ca40a6a65e56f6dbbf8632bc9c5dd0937c51e69b655ee4

  • SSDEEP

    1536:phbEey6y36sv0W7TDGOIrHuyk7xk2W5/uGxNFVYQffbuclGHQ4N0GkR88e8h3:plEebE6Cyk9i5/uGxNMS3azN/8e8h3

Score
10/10
brunoredline

Malware Config

Extracted

Family

redline

Botnet

bruno

C2

83.97.73.134:19071

Attributes
  • auth_value

    b23e240c277e85ce9d49d6165c0a2b48

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1116-97-0x0000000000310000-0x0000000000340000-memory.dmp
    .exe windows x86


    Headers

    Sections