Overview

overview

10

Static

static

10

4500-240-0...ry.exe

windows7-x64

4500-240-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4500-240-0x0000000000540000-0x000000000057E000-memory.dmp

  • Size

    248KB

  • MD5

    a3757591b59d172de86dd5a4d1c59c38

  • SHA1

    4a82ff814544cb12d97905c81c0f03c7fbfe1930

  • SHA256

    d4f49617885157ff34880534218d722c4a3492d1d7bf3c3202968d04f9b1e585

  • SHA512

    5709ab55bc274a26261c8b4f823ce6d01f1d2558ec3bbcfb53e4980856c4352ff8178eca91a0696ba0c5974b7b595e5a9020ed4f9b2528a610e9f3c8a7e68ad9

  • SSDEEP

    3072:4EjJpWunbNgcc+fw1nRKlnwT84Zhct/qR8NbtS6Gbmhmads:4GTWubNgcc+I1nRKlwTQ/PNbtS7Khma

Score
10/10
@ytlogsbotredline

Malware Config

Extracted

Family

redline

Botnet

@ytlogsbot

C2

185.216.70.238:37515

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4500-240-0x0000000000540000-0x000000000057E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections