Overview

overview

10

Static

static

10

3736-1095-...ry.exe

windows7-x64

3736-1095-...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    3736-1095-0x0000000000020000-0x000000000003E000-memory.dmp

  • Size

    120KB

  • MD5

    92628983378b39570039be54b3feaeab

  • SHA1

    79b06649c5d96eadec3d63c5e47134adaaa591e7

  • SHA256

    280cc3b953a721c968243dec4254fa0a34b3a9b2388208e9ec3e3cc959eb94d4

  • SHA512

    3da37a2233e9926000fcf27733f0fed9ad4f53b7de530609e76e9418ff577a7514d1da17ac6772a441c5b63551518f3a6bdbf39243c76201820e47f017be34fe

  • SSDEEP

    3072:h3HcjBPe7NerE+CrFkDSuOkZDcXiqEqVX6:heGKDRAXb

Score
10/10
6012068394_99redline

Malware Config

Extracted

Family

redline

Botnet

6012068394_99

C2

https://pastebin.com/raw/8baCJyMF

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3736-1095-0x0000000000020000-0x000000000003E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections