Overview

overview

10

Static

static

10

2992-1176-...ry.exe

windows7-x64

2992-1176-...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2992-1176-0x00000000001C0000-0x00000000001FE000-memory.dmp

  • Size

    248KB

  • MD5

    f5fb947f91ce103292e1711f79192c37

  • SHA1

    2e009950f90053255889dab9ab0622d59b62138d

  • SHA256

    c800df41ca6c8322c355ac5c22e8b0f78d04d515b9f9c98977593069913c358f

  • SHA512

    2a6bd389fc14e89501888e360a6e9d29320e44b0ffe5903b9b69f863c26b4415e02c42169faa50d5173d9d3b5ab81102292c96d4f86b1d5f436cdc0cfb20879a

  • SSDEEP

    3072:Nfng4InXNgcy9Wy3aPGcntCTt/qhGFlvDYLXZiTtzv:pg/XNgcWr3aPu/5FlvDYLpqt

Score
10/10
@ytlogsbotredline

Malware Config

Extracted

Family

redline

Botnet

@ytlogsbot

C2

194.169.175.235:42691

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2992-1176-0x00000000001C0000-0x00000000001FE000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections