Overview

overview

10

Static

static

10

2456-130-0...ry.exe

windows7-x64

2456-130-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2456-130-0x00000000008D0000-0x000000000095C000-memory.dmp

  • Size

    560KB

  • MD5

    cd53ae0ac84721161f75e4b0f1adea6a

  • SHA1

    b49e38899a84b5a621a4471ab378262476da83c2

  • SHA256

    ea6f168f2811e6b59c75b08db3d41afee104d66f10f59adb7bae5b896aec156d

  • SHA512

    8833b80e70dbdbcd97617c66bb3702103f1b01a6f1d7aef939006f9a9356a1768ce007f17046a26969bf7e6eb4087e45c8b5afcba4a138d451a002efb8f30b03

  • SSDEEP

    12288:dQ6/fux5ngRMDxPm31EUORYNOFnf4UjOcuXtxR+HJ0jRUXbByO:S6/fuTnPtOFgRYwFnfbOcuXtxRvqB9

Score
10/10
masharedline

Malware Config

Extracted

Family

redline

Botnet

masha

C2

77.91.68.48:19071

Attributes
  • auth_value

    55b9b39a0dae383196a4b8d79e5bb805

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2456-130-0x00000000008D0000-0x000000000095C000-memory.dmp
    .exe windows x86


    Headers

    Sections