Overview

overview

10

Static

static

10

5440-825-0...ry.exe

windows7-x64

5440-825-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    5440-825-0x0000000000580000-0x00000000005BE000-memory.dmp

  • Size

    248KB

  • MD5

    390b7aab66e50aeb98f8fe4b9e728310

  • SHA1

    a99d4171625b4b7f7cde84ad760ff9b6a9a95d3e

  • SHA256

    a3258a8cb60e57c74c8a6c18cb0ef59fbb55ca597f17f499acdd4dc81b90f9bf

  • SHA512

    6daca43f3f8074064212f6b13a50dca6347dc87f0952fcb16320fed855d5d5766c387d28cce21d7c97175c01044afbc04fbfb5397ccf1996722d980bc03304e0

  • SSDEEP

    3072:MEjJpWunbNgcc+fw1nRKlnwT84Zhct/qR8NbtS6GbmhmadI:MGTWubNgcc+I1nRKlwTQ/PNbtS7Khma

Score
10/10
@ytlogsbotredline

Malware Config

Extracted

Family

redline

Botnet

@ytlogsbot

C2

185.216.70.238:37515

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5440-825-0x0000000000580000-0x00000000005BE000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections