Overview

overview

10

Static

static

10

2008-898-0...ry.exe

windows7-x64

2008-898-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2008-898-0x00000000001C0000-0x00000000001FE000-memory.dmp

  • Size

    248KB

  • MD5

    9c8b72bea0b5abbd64f81bf9017e29e6

  • SHA1

    4259526ae8d032d54261eb0ad44a7196653622d2

  • SHA256

    1d97af7b42e8921b0c8883105a570d80d076514f0555bb128ddf755521e61cde

  • SHA512

    9ce6d5d1eee191ea2f8eaaf78efbf18d76087f7bb19d89d1cd0a82d5411a771929ee57dfe3e1c169fe6addd0a6115bbad26d951698164644f29b578c6ffabac7

  • SSDEEP

    3072:UtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQA1:UJMeucNgckedxCDo/doQVZdZRzzXZQ

Score
10/10
kukishredline

Malware Config

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2008-898-0x00000000001C0000-0x00000000001FE000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections