Overview

overview

10

Static

static

10

2320-257-0...ry.exe

windows7-x64

2320-257-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2320-257-0x00000000001C0000-0x00000000001F0000-memory.dmp

  • Size

    192KB

  • MD5

    d48feadbe624682dfb55d0aa6bf8725c

  • SHA1

    7239afd0c3b320c85efec7181172c4db3657d023

  • SHA256

    e0431f38e3d8c748283329758f23408a5551324c2512dd01800181db561e3a5f

  • SHA512

    ae2a2b31822cfc8a57a944ec17021cd0695341d3b24f3d4e169215703aa63d4bd308d13c8bc3b920d75c73a6d03a5dd1b1d6b173e62292b15cb86eb563b011f3

  • SSDEEP

    3072:8ORGSnRfr3I0SbF/tOOc5XjVEHyYoqE0sAiJrFueJ48e8he:cSp3I0SbF/OVESYoqE0XmFueG

Score
10/10
yt logs cloudredline

Malware Config

Extracted

Family

redline

Botnet

YT LOGS CLOUD

C2

176.123.4.46:33783

Attributes
  • auth_value

    f423cd8452a39820862c1ea501db4ccf

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2320-257-0x00000000001C0000-0x00000000001F0000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections