Overview

overview

10

Static

static

10

2996-122-0...ry.exe

windows7-x64

2996-122-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2996-122-0x00000000002A0000-0x00000000002D0000-memory.dmp

  • Size

    192KB

  • MD5

    b93bbddcac99d01ff6f83c4495268b2e

  • SHA1

    f5a24b5a3343c88cc4578c4cbd005e450f31f732

  • SHA256

    acbcb01a9c789ff999febfaceb9033d8d115a58b4eea29e29af99e4cb4c023c0

  • SHA512

    2583a2047fa8efb71017058de39f4d2e5325bb5be3a93a092109f800470843802e4b6eba43e6b26c69cc0b03cf0dcd73663b70191231bb9e77abd81d4bc35fdc

  • SSDEEP

    3072:xAF5KBstbkeNKZIhDDxNcaoMczCOJ8e8hL:GXb33hDYjyOJ

Score
10/10
jakoredline

Malware Config

Extracted

Family

redline

Botnet

jako

C2

77.91.124.49:19073

Attributes
  • auth_value

    3db90f2679ab2890874898c7c6d65799

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2996-122-0x00000000002A0000-0x00000000002D0000-memory.dmp
    .exe windows x86


    Headers

    Sections