Overview

overview

10

Static

static

10

2388-130-0...ry.exe

windows7-x64

2388-130-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2388-130-0x0000000000250000-0x00000000002DC000-memory.dmp

  • Size

    560KB

  • MD5

    351036ebc94d851853247abdfa15193a

  • SHA1

    717a6922bba53e82fd5e58ec80652f564b279c90

  • SHA256

    9de2f9d532dac9093dd86ccb0882782b4f0868ee0a901bf8fcf42322ef5eec46

  • SHA512

    5ec55b2f41f7b2868c7e6fa52e18b3c51e9a2e4a7fca838ce70eeb5182a1dd5959696f86598e7c907c22dab632058722f07abd337ea707fb57ddb79ed60a6d07

  • SSDEEP

    12288:K3ZBazW822Gbl5Y3S2ZY3Ofdv1GJNWpRiP7BaXBDf:K3ZBazWVbI3S2ACvENWuNaV

Score
10/10
masharedline

Malware Config

Extracted

Family

redline

Botnet

masha

C2

77.91.68.48:19071

Attributes
  • auth_value

    55b9b39a0dae383196a4b8d79e5bb805

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2388-130-0x0000000000250000-0x00000000002DC000-memory.dmp
    .exe windows x86


    Headers

    Sections