Overview

overview

10

Static

static

10

2124-122-0...ry.exe

windows7-x64

2124-122-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2124-122-0x0000000000350000-0x0000000000380000-memory.dmp

  • Size

    192KB

  • MD5

    c4c73ea6043567a7d578c3477f7638dc

  • SHA1

    1ea97716bab6b8a06b271b8f05feccd1c9fe2d2e

  • SHA256

    42aec178b347845b46f0bf0eeed35331c332ee2102b3ba8c775135e45d4762a1

  • SHA512

    c8d6d133aa03109af8cc52a089c1230be0d71fc175ec5de257dcde588756799a2e885d8c7041f0b02af98e302d6cebf4f7450742453facb484aeba91a2fd0a20

  • SSDEEP

    3072:rAF5KBstbkeNKZIhDDxNcaoMczCO88e8hL:sXb33hDYjyO8

Score
10/10
jakoredline

Malware Config

Extracted

Family

redline

Botnet

jako

C2

77.91.124.49:19073

Attributes
  • auth_value

    3db90f2679ab2890874898c7c6d65799

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2124-122-0x0000000000350000-0x0000000000380000-memory.dmp
    .exe windows x86


    Headers

    Sections