Overview

overview

10

Static

static

10

2808-119-0...ry.exe

windows7-x64

2808-119-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2808-119-0x00000000003A0000-0x00000000003D0000-memory.dmp

  • Size

    192KB

  • MD5

    2e848e23416331c074c7062adf1f7904

  • SHA1

    c94179f3b8434cde971e5bd5ce52bd4a3f50cc53

  • SHA256

    0c6ae353908a8cd40bef03eca5f377d0c7a4fca89ca263a5d46a1d7637da9a56

  • SHA512

    3e65ca66734c4018a5ae5ab26c4865101718ee91a7dbbeba67553ffb10532466e8e75ff2d9a28a90257ebe9861b59e35863efe9703daa153f76a75cffacd65d5

  • SSDEEP

    1536:elBA36sv0W7T1sjvrHzbNSISuiiB0J57TNyQGxNXLYQLrbuLh8yrEHVF+0GkRr8U:erqCnNsZWSZ5GxN8yi8yIHVF+U8e8hO

Score
10/10
masharedline

Malware Config

Extracted

Family

redline

Botnet

masha

C2

77.91.68.48:19071

Attributes
  • auth_value

    55b9b39a0dae383196a4b8d79e5bb805

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2808-119-0x00000000003A0000-0x00000000003D0000-memory.dmp
    .exe windows x86


    Headers

    Sections