Overview

overview

10

Static

static

10

5028-75-0x...ry.exe

windows7-x64

5028-75-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5028-75-0x0000000000830000-0x0000000000860000-memory.dmp

  • Size

    192KB

  • MD5

    79b7ba03916459ecc1f555016d8fd002

  • SHA1

    7fbce8a4da841f417b9c6aee5b9c209b910294b4

  • SHA256

    e3e146882795b37bdbb800ee2ba84e3e9df3e65fcb405245525203c669787ebc

  • SHA512

    759f8a4bb008d95c8a9ff65272fc41d24045251232b183f7f7bbcba0748f13d94ac4e0e5074db9ea7e1a31da0e74822f08a910325b67df0cae8d10ea29594bb5

  • SSDEEP

    3072:AmJOPRIaXI0TIakh+OQhqV+wp5/aif4E0+6OKj0ap0HijJL8e8hh:dJObXI0TIakh4pE4E0/Odap0Hijd

Score
10/10
kendoredline

Malware Config

Extracted

Family

redline

Botnet

kendo

C2

77.91.124.82:19071

Attributes
  • auth_value

    5a22a881561d49941415902859b51f14

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5028-75-0x0000000000830000-0x0000000000860000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections