Overview

overview

10

Static

static

10

3060-54-0x...ry.exe

windows7-x64

1

3060-54-0x...ry.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    3060-54-0x0000000000220000-0x0000000000250000-memory.dmp

  • Size

    192KB

  • MD5

    4e33a2601e0976b4a0f4538e8603b87b

  • SHA1

    249b398cfc88873ffb0d77fb6cb265adf1677003

  • SHA256

    507fc20b243c45693a95b77fbe2ff65578f27d95a7bc3176f1eb7708e12dff82

  • SHA512

    467ec5129f01e352e86b1115815720c99cd4c4469646858844e08cb541bd8c14e0281cd52ffe5754c79a9c73a18f66fdf7a9dc97a00491a35e32466678ded1b3

  • SSDEEP

    3072:nlJUdf25irkQXmZEJTVY0xNBaTe4n8e8he:nlY0uYmon

Score
10/10
buil2redline

Malware Config

Extracted

Family

redline

Botnet

buil2

C2

77.246.105.2:12564

Attributes
  • auth_value

    08a69f05f94bc1584d83f790bda7167a

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3060-54-0x0000000000220000-0x0000000000250000-memory.dmp
    .exe windows x86


    Headers

    Sections