Overview

overview

10

Static

static

10

1128-277-0...ry.exe

windows7-x64

1128-277-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1128-277-0x0000000000490000-0x00000000004C0000-memory.dmp

  • Size

    192KB

  • MD5

    6dba05dfe6914beb638f4228fbe005f0

  • SHA1

    cb695427fe98e329fa49a8db3655942a9c63846f

  • SHA256

    7be4ce03f2fc7263ce0d5828b391d2b7e160e2299746fd117471a7ef0d54ee62

  • SHA512

    d4bc42dd6a20211313e0df7eb2dc5c2c0b507a2247d4d6f73334ee010992097dd4526caccc58d1c8180e9c8c9a4c8dcce526a3b5d3d5812d00860c05895e5b2f

  • SSDEEP

    3072:FAWi/g1IzuRb5xNAKY73zOyuj++0r8e8hk:Fzi/+VCHuyuj++0r

Score
10/10
nowaredline

Malware Config

Extracted

Family

redline

Botnet

nowa

C2

77.91.124.49:19073

Attributes
  • auth_value

    6bc6b0617aa32bcd971aef4a2cf49647

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1128-277-0x0000000000490000-0x00000000004C0000-memory.dmp
    .exe windows x86


    Headers

    Sections