Overview

overview

10

Static

static

10

1692-123-0...ry.exe

windows7-x64

1692-123-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1692-123-0x00000000002B0000-0x00000000002E0000-memory.dmp

  • Size

    192KB

  • MD5

    a139cb2c475a4437e8777b44e149e90c

  • SHA1

    42012365fb7f97351e79eb676083d56618ff5b59

  • SHA256

    a1961a50d98ec712d21475dc11ecc386274cc84a4e9565fd7fd37521889e6a68

  • SHA512

    0b77b89e677ecfcd481bff90886eca118a125ce2b8b1e0aeaed091f19e7d242cf6a5633ef7c7debacf3dd3045b5d4b9a87d3b04f66c3a10589b169c65f8b38b4

  • SSDEEP

    3072:4nOrlpyS3xp5xN1yJ/4BMzxUdE/J8e8h+:4Of7flBMzxUdE/J

Score
10/10
narkoredline

Malware Config

Extracted

Family

redline

Botnet

narko

C2

83.97.73.134:19071

Attributes
  • auth_value

    a9d8c6db81c7e486f5832bc2ee48cb84

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1692-123-0x00000000002B0000-0x00000000002E0000-memory.dmp
    .exe windows x86


    Headers

    Sections