Overview

overview

10

Static

static

10

2472-54-0x...ry.exe

windows7-x64

1

2472-54-0x...ry.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    2472-54-0x0000000000220000-0x0000000000250000-memory.dmp

  • Size

    192KB

  • MD5

    5a41a67a1250f67d79b586dc051cccb2

  • SHA1

    dcb07dde9523dc442fd24f17ffbd1373fe9e2087

  • SHA256

    bc7e9215e45b8c71e58e759a73d9188e62baa03d3c4dc2845ec1ead141013463

  • SHA512

    b4657604e53b417eac5053641d6043785f0b26ec0c0e6ad443043d7b266d159f9cf94155a4e831323d0581cb1e300028de0ab8f78c9c96c17bccb0942bb3bc75

  • SSDEEP

    3072:100h3GyCdI05GPbvOXbaFai9OfeEZBE0OhRcR0feJy8e8hK:nhUdI05GPbsiCBE06I0feE

Score
10/10
1308redline

Malware Config

Extracted

Family

redline

Botnet

1308

C2

176.123.9.142:14845

Attributes
  • auth_value

    7e5dae374c0978dd73c21b47e8439809

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2472-54-0x0000000000220000-0x0000000000250000-memory.dmp
    .exe windows x86


    Headers

    Sections