Overview

overview

10

Static

static

10

60-269-0x0...ry.exe

windows7-x64

60-269-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    60-269-0x00000000005D0000-0x0000000000600000-memory.dmp

  • Size

    192KB

  • MD5

    9e1aa0183736fd3701eddc018b419051

  • SHA1

    8f08b4555461be8441921119e9e87d6fafea2b09

  • SHA256

    943b7df7959268157bc660801120b8488886e3dfc4ca362715ea59e5c92a21bd

  • SHA512

    53c0d4564baac075c718bb0a70e54207877cbd58fa39fc8cf9a051f6ad873a803c98d829769953f6ac9752b81b8bdd38a99624c5625aeb4bf9f6bc4a170d44ff

  • SSDEEP

    3072:sAWi/g1IzuRb5xNAKY73zOyuj++0X8e8hk:szi/+VCHuyuj++0X

Score
10/10
nowaredline

Malware Config

Extracted

Family

redline

Botnet

nowa

C2

77.91.124.49:19073

Attributes
  • auth_value

    6bc6b0617aa32bcd971aef4a2cf49647

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 60-269-0x00000000005D0000-0x0000000000600000-memory.dmp
    .exe windows x86


    Headers

    Sections