Overview

overview

10

Static

static

10

5324-597-0...ry.exe

windows7-x64

5324-597-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5324-597-0x00000000001C0000-0x00000000001DE000-memory.dmp

  • Size

    120KB

  • MD5

    9dc5838f20937b064693e39edf847163

  • SHA1

    ba5ec657a8d43a1c58801ca048e24ac62721e92d

  • SHA256

    b52a9b647081dfd1814d8beddbeda8735f65006ce4f5237a4c3d360653e51c50

  • SHA512

    fb8c2146bd208cdf9c85eec38d0fc7ab1f029d25c2d0404776b5211e46b9f0b218cb4f4fd12f2ee79883f1a1af9f90b451c0ff55ccb50274056347ca7f241b88

  • SSDEEP

    3072:r3HcjBPe7NerE+CrFkDSuOkZDcXiqEqVXI:reGKDRAXb

Score
10/10
6012068394_99redline

Malware Config

Extracted

Family

redline

Botnet

6012068394_99

C2

https://pastebin.com/raw/8baCJyMF

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5324-597-0x00000000001C0000-0x00000000001DE000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections