Overview

overview

10

Static

static

10

2956-668-0...ry.exe

windows7-x64

2956-668-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2956-668-0x00000000001C0000-0x00000000001DE000-memory.dmp

  • Size

    120KB

  • MD5

    9d0b46f71c3d593bfd0f8ae87b1361b5

  • SHA1

    37ab2b89641ea6f8ff7dcf44b0f7e6eb6abedd74

  • SHA256

    71acb17dd6bb27a27f6c5f1758da5d8ac36df8babbff7f56773a239fd1ad4d74

  • SHA512

    ecf482db0cd60ab43c536dfd1dd7043233dddee97e80778e5c9a62d8a19b4e9ce3722290e0fa308edaef7db7e3008e0acc5c1fa2155cbf777398d23672804a7b

  • SSDEEP

    3072:B3HcjBPe7NerE+CrFkDSuOkZDcXiqEqVXI:BeGKDRAXb

Score
10/10
6012068394_99redline

Malware Config

Extracted

Family

redline

Botnet

6012068394_99

C2

https://pastebin.com/raw/8baCJyMF

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2956-668-0x00000000001C0000-0x00000000001DE000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections