Overview

overview

10

Static

static

10

2912-54-0x...ry.exe

windows7-x64

2912-54-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2912-54-0x0000000000290000-0x00000000002C0000-memory.dmp

  • Size

    192KB

  • MD5

    bd12522d9e9576e6a01b664f951cf8d2

  • SHA1

    32a8a7b426d60eeb9856f1b06ffd8ad6f717fe64

  • SHA256

    d20008543e031b51e0fa5d8b58f1cfb1e9ccc2100c1c021cadacf60483105642

  • SHA512

    31cd020daf62eed8bfbb3dfb34be5e151076df5a5b95a1517226d2194eee64b48847b5ff975c3ada4630d35f3227f16adcbdee8a8ceae74d4c77b3c3572ea98f

  • SSDEEP

    3072:gU8efIRpBLITnx6xNKmVqoYXyICg+bQ8e8h8:gUcl27rXXyICg+bQ

Score
10/10
@prsvt6666redline

Malware Config

Extracted

Family

redline

Botnet

@prsvt6666

C2

94.142.138.4:80

Attributes
  • auth_value

    87d1997a564fa7581db209cc71c07a4e

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2912-54-0x0000000000290000-0x00000000002C0000-memory.dmp
    .exe windows x86


    Headers

    Sections