Overview

overview

10

Static

static

10

1408-83-0x...ry.exe

windows7-x64

1

1408-83-0x...ry.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1408-83-0x0000000000270000-0x00000000002A0000-memory.dmp

  • Size

    192KB

  • MD5

    eb7e28ef6df1d692d44193bca34616c5

  • SHA1

    06e3456d0719f9d222166d0238a2702336e4ada4

  • SHA256

    d541b50a40f1af1f1713db2de52fdf7d12427f82e37fada53582160e845eb3e0

  • SHA512

    e03e72f3d86531e5602158d575df3564b84f11ed157a443892a17a8a486a09937b8cd3628b1719a5cc74d3d4a13dc9f753a0d77ac02dcc700b16dcd34f1f098e

  • SSDEEP

    1536:OhbEey6y36sv0W7TDGOIrHuyk7xk2W5/uGxNFVYQffbuclGHQ4N0GkRe8e8h3:OlEebE6Cyk9i5/uGxNMS3azNJ8e8h3

Score
10/10
brunoredline

Malware Config

Extracted

Family

redline

Botnet

bruno

C2

83.97.73.134:19071

Attributes
  • auth_value

    b23e240c277e85ce9d49d6165c0a2b48

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1408-83-0x0000000000270000-0x00000000002A0000-memory.dmp
    .exe windows x86


    Headers

    Sections