Overview

overview

10

Static

static

10

1648-97-0x...ry.exe

windows7-x64

1648-97-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1648-97-0x0000000000340000-0x0000000000370000-memory.dmp

  • Size

    192KB

  • MD5

    c480eb0c1ce219e0619d326ca093306e

  • SHA1

    f5e4b153b43f906000422052b7af0d980e535781

  • SHA256

    2cefe6ddd5f8fa71821280d94906ad80a25e8841dece7a21c251aa9ab9855488

  • SHA512

    c2da9501c9ce95f1293cc77cc7937f6ecc23c4189d41ed95caacfc6cb918c4fb9273766663d0865a52a359c38a186749bc212bf01723927a6e72035c48e36b35

  • SSDEEP

    3072:PtE62xyQ6d+VeXdxNLgVK880EHr8e8hK:lEmOA9S80EHr

Score
10/10
andreredline

Malware Config

Extracted

Family

redline

Botnet

andre

C2

77.91.124.49:19073

Attributes
  • auth_value

    8e5522dc6bdb7e288797bc46c2687b12

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1648-97-0x0000000000340000-0x0000000000370000-memory.dmp
    .exe windows x86


    Headers

    Sections