Overview

overview

10

Static

static

10

2596-62-0x...ry.exe

windows7-x64

10

2596-62-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2596-62-0x00000000025C0000-0x00000000025F4000-memory.dmp

  • Size

    208KB

  • MD5

    d10f398ad0271bb98ccbefed1a37d4e7

  • SHA1

    70854908fedfb841e4f6400308fda07cb399809c

  • SHA256

    9218dd2b45c71438985a2a6e226620502a1e7f271757698517d5889b9eb8e3c6

  • SHA512

    69fbec21ad8352a5b8639f67773066698346284bc982257dd654cad7c3e809cf9328c8c1ecf2154751a317108374b6f795dd61eee8d7df16bbf6bdf87d92104f

  • SSDEEP

    3072:oO9tmtqDf3YIv5GPA+/ttlOu3lEDUG9PdHd9wEMxwaZgdl8e8hR:FtmtqDgIv5G93lSd9PdHdsS

Score
10/10
logsdiller cloud (telegram: @logsdillabot)redline

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

209.250.248.11:33522

Attributes
  • auth_value

    c2955ed3813a798683a185a82e949f88

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2596-62-0x00000000025C0000-0x00000000025F4000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections