Overview

overview

10

Static

static

10

2548-204-0...ry.exe

windows7-x64

2548-204-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2548-204-0x00000000005A0000-0x00000000005D0000-memory.dmp

  • Size

    192KB

  • MD5

    dbe89b2b3575b3bed51b070c8ce679a3

  • SHA1

    8cd826d17c734d1df37ee87c63099970ba3b39d4

  • SHA256

    cb87363a94162693f701bd02655accf0a27e64f37298c22ff9c29b0a6414e439

  • SHA512

    e5c9e9b454c7337d798ae6481d4d0ace6183ea9360a65adf53b78bccf5908f34a29d574519b292f349b49dee64b14025a6c8adc0876aa538970deed55940b013

  • SSDEEP

    3072:GORGSnRfr3I0SbF/tOOc5XjVEHyYoqE0sAiJrFueJS8e8he:SSp3I0SbF/OVESYoqE0XmFueU

Score
10/10
yt logs cloudredline

Malware Config

Extracted

Family

redline

Botnet

YT LOGS CLOUD

C2

176.123.4.46:33783

Attributes
  • auth_value

    f423cd8452a39820862c1ea501db4ccf

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2548-204-0x00000000005A0000-0x00000000005D0000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections