Overview

overview

10

Static

static

10

1356-54-0x...ry.exe

windows7-x64

1356-54-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1356-54-0x0000000000020000-0x000000000003E000-memory.dmp

  • Size

    120KB

  • MD5

    41190d9ba943a62c0cf0c69908ac9230

  • SHA1

    4d402561b3c73acafe9923d54dc4bb5136b95a26

  • SHA256

    d49b0101847f22c55d30b030ab5a398c14bcf05e5bbb876af6b48817ea547b9a

  • SHA512

    5e911ec5b4ccae25e313e35c7407049b8d6b546351aa5c1a568b6e21d36c93f6f3da1fdca68a1d2d84ff7e60a10b782247e3d8d7694b45f40fd8040cbb071e19

  • SSDEEP

    1536:GATp9NZjE6oljj9tAtzZM4YCrB/atqgdbibEB/l2kVoSGI:GATp9DOjj9tA5C4JJatvqEhff

Score
10/10
5527589964_99redline

Malware Config

Extracted

Family

redline

Botnet

5527589964_99

C2

https://pastebin.com/raw/tnW31tPp

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1356-54-0x0000000000020000-0x000000000003E000-memory.dmp
    .exe windows x86


    Headers

    Sections