Overview

overview

10

Static

static

10

1740-56-0x...ry.exe

windows7-x64

10

1740-56-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1740-56-0x0000000004710000-0x0000000004738000-memory.dmp

  • Size

    160KB

  • MD5

    d38670639efaaff0d42a8a0507c604ff

  • SHA1

    9c129570f17e42e10b281a59f077a1e71eba645f

  • SHA256

    a8366800fbfd1680893122fc62beec2aa28b43b3a49665f333c1c82f4a97e549

  • SHA512

    d85d49e139e5792ae25d022e807238cd32d64717a3df6c66ad2aae04362ab08f52feff5b6a5e692c2297e1fcaa0d3572ca3a9b27ea95ac02db4de99c024dc9bb

  • SSDEEP

    1536:Qfq+tN6Xa15rPpDyBvL9+L5+bYvRE6Kw69tsYgibfbFDKsRn:Qn8CqjwLYhlYYgafJln

Score
10/10
@germanyredline

Malware Config

Extracted

Family

redline

Botnet

@Germany

C2

194.26.135.162:2920

Attributes
  • auth_value

    9d15d78194367a949e54a07d6ce02c62

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1740-56-0x0000000004710000-0x0000000004738000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections