Overview

overview

10

Static

static

10

2748-132-0...ry.exe

windows7-x64

2748-132-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2748-132-0x0000000001DC0000-0x0000000001E4C000-memory.dmp

  • Size

    560KB

  • MD5

    6bed4a6e7fd0a3880767340a7fbe83f0

  • SHA1

    38c8a2dd7e99a254a40e732b8ff2f9274a9ed863

  • SHA256

    5b33d32f7f3bb5729dfa23371caf2569db89b99b407f5a687729d27bece75cbf

  • SHA512

    f53cd21793307d6574bd117134517af94f48758efb41529894b406aacdbb5fa40827ffc3199cb1010f5e90efc965ef0183a21de95c181f05df2ac74975bc3df9

  • SSDEEP

    12288:OSyqqiAYz9CfqLMPmKmQPG4DJiohBT/aY78rtqWKBfmhc:OSrqyJCfuMuFQeIiohBT/aTxS

Score
10/10
masharedline

Malware Config

Extracted

Family

redline

Botnet

masha

C2

77.91.68.48:19071

Attributes
  • auth_value

    55b9b39a0dae383196a4b8d79e5bb805

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2748-132-0x0000000001DC0000-0x0000000001E4C000-memory.dmp
    .exe windows x86


    Headers

    Sections