Overview

overview

10

Static

static

10

3340-125-0...ry.exe

windows7-x64

3340-125-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    3340-125-0x0000000000700000-0x000000000073E000-memory.dmp

  • Size

    248KB

  • MD5

    6749115a69caee10b3b5c51f32f1957b

  • SHA1

    1b7a83afe98246a4db13dae8f01768c4bd559926

  • SHA256

    77709ac874258aeceebab8c3e4d1d7c6d0421cd68db666552ca026d6e4ab3dff

  • SHA512

    9f9ee3c29a668cb4760445e3cf791ec49cf0d406cdfac6befe2758015082f6b3378a4ca9b4ff9fd56bb16db3c8fadadc7d36fc664499ee6c4e77dc14ee7d7634

  • SSDEEP

    3072:EEjJpWunbNgcc+fw1nRKlnwT84Zhct/qR8NbtS6GbmhmadQ:EGTWubNgcc+I1nRKlwTQ/PNbtS7Khma

Score
10/10
@ytlogsbotredline

Malware Config

Extracted

Family

redline

Botnet

@ytlogsbot

C2

185.216.70.238:37515

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3340-125-0x0000000000700000-0x000000000073E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections