Overview

overview

10

Static

static

10

2388-130-0...ry.exe

windows7-x64

2388-130-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2388-130-0x0000000000250000-0x00000000002DC000-memory.dmp

  • Size

    560KB

  • MD5

    518f079da85205263a22d21e7d918358

  • SHA1

    b25c9ae3f11fc70a0915ba3330f87d201944c4c3

  • SHA256

    faf6d506d13d716a69453ec0147e49ad79fd878d6a138e364612cc73c3c2011e

  • SHA512

    70729d5ff9265ca7c75160a6ce3e49e90385cb64053eb4de1beed9bf431b8669f3285282715d3b7b513c22b5ad4c86efe101771c0103a758debef1bbd7933636

  • SSDEEP

    12288:01EYaIKE0wHnA0DQEGa501Xx6A+7oCD3:0uYaLdu501hP0

Score
10/10
masharedline

Malware Config

Extracted

Family

redline

Botnet

masha

C2

77.91.68.48:19071

Attributes
  • auth_value

    55b9b39a0dae383196a4b8d79e5bb805

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2388-130-0x0000000000250000-0x00000000002DC000-memory.dmp
    .exe windows x86


    Headers

    Sections