Overview

overview

10

Static

static

10

268-116-0x...ry.exe

windows7-x64

268-116-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    268-116-0x0000000000320000-0x0000000000350000-memory.dmp

  • Size

    192KB

  • MD5

    9a9fc195e5e2848680073f445881d854

  • SHA1

    d01ceafd6d21b85ba94411b8d824ca8719a6bd89

  • SHA256

    ac574883d06195a17d5fdb737b822a8a707f5dd4d5237f5e4fd61f99ec68c4f4

  • SHA512

    d3a5721b5b05e70397f28a5c635112b1a83ea92b4ec6e755589b37ba3a3a83c2decb469aa9a1bf5c0d7528b14754f79bb57ae606faab0292305ee74b2640625b

  • SSDEEP

    1536:ilBA36sv0W7T1sjvrHzbNSISuiiB0J57TNyQGxNXLYQLrbuLh8yrEHVF+0GkRT8U:irqCnNsZWSZ5GxN8yi8yIHVF+s8e8hO

Score
10/10
masharedline

Malware Config

Extracted

Family

redline

Botnet

masha

C2

77.91.68.48:19071

Attributes
  • auth_value

    55b9b39a0dae383196a4b8d79e5bb805

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 268-116-0x0000000000320000-0x0000000000350000-memory.dmp
    .exe windows x86


    Headers

    Sections