Overview

overview

10

Static

static

10

2328-61-0x...ry.exe

windows7-x64

10

2328-61-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2328-61-0x0000000002CC0000-0x0000000002CF4000-memory.dmp

  • Size

    208KB

  • MD5

    fc1cf00b48c52d81997b5a09bb3ca92d

  • SHA1

    62f38edd7d3ed92b43ac49c308745959b698779f

  • SHA256

    388d677040702492b300b9082acaaa9d146c29d8d993890dcedabee994ba6a84

  • SHA512

    298a0db2e7764d0bac0f73815befa414f8451fcdfbd1a9c92e6cac6b45902ce5364322e1eb3da7613f6a24d7c7097b9cec2bca01b2a4157532d3e9db2c6b69dd

  • SSDEEP

    3072:XY4ss69EQn5lcO3EMU2BSIQD4Wxo0YESwoX5mWMv9054+aDzeq8e8h7e:rss6d5lcH1WEyX5mWMv905kTJ

Score
10/10
logsdiller cloud (telegram: @logsdillabot)redline

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

178.32.90.250:29608

Attributes
  • auth_value

    c2955ed3813a798683a185a82e949f88

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2328-61-0x0000000002CC0000-0x0000000002CF4000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections