Overview

overview

10

Static

static

10

2816-131-0...ry.exe

windows7-x64

2816-131-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2816-131-0x0000000000930000-0x00000000009BC000-memory.dmp

  • Size

    560KB

  • MD5

    60c0f54bf0cae9569f2e6259510b5305

  • SHA1

    c7513721fd2c494fcd960287679786a0b49e995f

  • SHA256

    24d021dcda771be990e79461de9b974ccd4a52dd13eb4756ecbf39585519eb74

  • SHA512

    5a9b9a207091cda45e090b909718c078ba45de3714ca897e0a984a1fbd8ac96eaf412e88f51f33956669af3b98d7cbcda6ca167a71c41c39f3dc3e6d18486283

  • SSDEEP

    12288:8NRK2PkIoBAsL2+OyPZWHBHL8+ZDFVle:8KWkhLxOyPZWhHL88xe

Score
10/10
masharedline

Malware Config

Extracted

Family

redline

Botnet

masha

C2

77.91.68.48:19071

Attributes
  • auth_value

    55b9b39a0dae383196a4b8d79e5bb805

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2816-131-0x0000000000930000-0x00000000009BC000-memory.dmp
    .exe windows x86


    Headers

    Sections