Overview

overview

10

Static

static

10

2208-187-0...ry.exe

windows7-x64

2208-187-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2208-187-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    f90f2e7aeee11c9d22a51567cdb5909e

  • SHA1

    c9b4ea03efcb704d4744e558d4e066dcd89b45c8

  • SHA256

    13645e2a08185eb40fbce7f773578b7010b09b378c1cf927bafd039e0f00bfac

  • SHA512

    dc7a2abe71fc1ccc3353e7b1ffdad1a006f7681477402855ccda263c170f69b840a9edf060e1cdffb03fdde4060366511406c2c444f76dae2a7fcbd5fc5edc34

  • SSDEEP

    3072:0ORGSnRfr3I0SbF/tOOc5XjVEHyYoqE0sAiJrFueJM8e8he:USp3I0SbF/OVESYoqE0XmFueK

Score
10/10
yt logs cloudredline

Malware Config

Extracted

Family

redline

Botnet

YT LOGS CLOUD

C2

176.123.4.46:33783

Attributes
  • auth_value

    f423cd8452a39820862c1ea501db4ccf

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2208-187-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections