Overview

overview

10

Static

static

10

2196-122-0...ry.exe

windows7-x64

2196-122-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2196-122-0x0000000000250000-0x0000000000280000-memory.dmp

  • Size

    192KB

  • MD5

    868145996f22043a3fb2a5e1c5385f05

  • SHA1

    0325a3a9cdfe9c7cbd41f607c4b2b248162f1363

  • SHA256

    be55ba262095f7c9ae3e37c15881fc9958d73766e021f7917934f20ece7107c8

  • SHA512

    6c96aa06c747a6f2520b68b4857ca891f50b28d6309f726c9a6601ec8a18897a1d0c5069543e6e831c1f88979eac75bf631b16298e8a398d3f265dc10aeb2cca

  • SSDEEP

    3072:4AF5KBstbkeNKZIhDDxNcaoMczCOM8e8hL:tXb33hDYjyOM

Score
10/10
jakoredline

Malware Config

Extracted

Family

redline

Botnet

jako

C2

77.91.124.49:19073

Attributes
  • auth_value

    3db90f2679ab2890874898c7c6d65799

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2196-122-0x0000000000250000-0x0000000000280000-memory.dmp
    .exe windows x86


    Headers

    Sections