Overview

overview

10

Static

static

10

2008-122-0...ry.exe

windows7-x64

2008-122-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2008-122-0x0000000000290000-0x00000000002C0000-memory.dmp

  • Size

    192KB

  • MD5

    6fde7f4630912c2459cb87ebbf21dea1

  • SHA1

    69c39ff2ca3e9208f6ce1df75e4be214af2ac561

  • SHA256

    a5929ad4254d042795236b788972a6e1e135e56e893aeb32503afa61cbb5ce7d

  • SHA512

    91d7cb178f17bb6359538294c71220333710e0d3f68e6e80808863c49ac237dc7b9d100a1c2e31209a7254fca0f8dfebcf52653221799bd5869256029ba9334c

  • SSDEEP

    3072:HEV5bSQxA6IldyYxN3KVaxLzzUY472g8e8h9:HEFAlW8TLzzUY472g

Score
10/10
novakredline

Malware Config

Extracted

Family

redline

Botnet

novak

C2

77.91.124.49:19073

Attributes
  • auth_value

    31966dcd1c6ca86e6e8b0a259f9d8ffd

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2008-122-0x0000000000290000-0x00000000002C0000-memory.dmp
    .exe windows x86


    Headers

    Sections