Overview

overview

10

Static

static

10

1980-54-0x...ry.exe

windows7-x64

1980-54-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1980-54-0x0000000000230000-0x0000000000260000-memory.dmp

  • Size

    192KB

  • MD5

    a4aa5e7be22263b58613504b928224dc

  • SHA1

    7afd543b75d7b9832f62b5fd3412a550a5ef162f

  • SHA256

    160083346538d3d455511f799e4217b2775a4291125d225924f62db51145d0ba

  • SHA512

    96aca40cdca49a7124af042f88ea9af2ccee3face8a57756369668bcaefba07d2fea01850ce112d1dd0a4c6bce25d9d114d37cc3ed3a3b30568b359e3736403d

  • SSDEEP

    3072:ctE62xyQ6d+VeXdxNLgVK880EHq8e8hK:EEmOA9S80EHq

Score
10/10
andreredline

Malware Config

Extracted

Family

redline

Botnet

andre

C2

77.91.124.49:19073

Attributes
  • auth_value

    8e5522dc6bdb7e288797bc46c2687b12

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1980-54-0x0000000000230000-0x0000000000260000-memory.dmp
    .exe windows x86


    Headers

    Sections