Overview

overview

10

Static

static

10

4448-270-0...ry.exe

windows7-x64

4448-270-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    4448-270-0x0000000000450000-0x0000000000480000-memory.dmp

  • Size

    192KB

  • MD5

    13d5fdc957c15be2c7109a740f0ebac3

  • SHA1

    82e6a231744093610d14f03a2ce51638e83be7a1

  • SHA256

    9a30a49ee3fa6e97a745a424aa39b27c4d76d19ccfdb650e4d04bd091b137d17

  • SHA512

    8d7d611e4ac3648be5f423a3650f3f8dbd53998c6cddfb373355f507943c71e7097ab6700a0036fc05a2fbda4faa4710b082b61b21a4c9c4b1016179314a47eb

  • SSDEEP

    3072:ytE62xyQ6d+VeXdxNLgVK880EHQ8e8hK:+EmOA9S80EHQ

Score
10/10
andreredline

Malware Config

Extracted

Family

redline

Botnet

andre

C2

77.91.124.49:19073

Attributes
  • auth_value

    8e5522dc6bdb7e288797bc46c2687b12

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4448-270-0x0000000000450000-0x0000000000480000-memory.dmp
    .exe windows x86


    Headers

    Sections