Overview

overview

10

Static

static

10

1336-97-0x...ry.exe

windows7-x64

1336-97-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1336-97-0x00000000002B0000-0x00000000002E0000-memory.dmp

  • Size

    192KB

  • MD5

    b2fd5e21218407964cca66a09b9da510

  • SHA1

    c19481e95ffce1ecc116b1a4fcc4ddba819aea72

  • SHA256

    f773225404e6ca8fc2366e5920b200d1933d67270358fce4cb316354dd151914

  • SHA512

    897f83f283c7031e4267707c906979e773a1f1a3667f8931732b8fed8707b63e651aeeb85510d01a3ac64f34b0def2ae33158830e912ba882947a0e44fd529db

  • SSDEEP

    3072:itE62xyQ6d+VeXdxNLgVK880EHy8e8hK:OEmOA9S80EHy

Score
10/10
andreredline

Malware Config

Extracted

Family

redline

Botnet

andre

C2

77.91.124.49:19073

Attributes
  • auth_value

    8e5522dc6bdb7e288797bc46c2687b12

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1336-97-0x00000000002B0000-0x00000000002E0000-memory.dmp
    .exe windows x86


    Headers

    Sections