Overview

overview

10

Static

static

10

1620-175-0...ry.exe

windows7-x64

1620-175-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1620-175-0x00000000010A0000-0x00000000010DE000-memory.dmp

  • Size

    248KB

  • MD5

    78ece156686fb0e1788d61d891564634

  • SHA1

    dfbf70f91ecdc42b174aa04eb5a802ded00dbbe7

  • SHA256

    ca9bfb2d46f613aeecb2e8038cba041db9b8861c833720535a893aa43d6351c2

  • SHA512

    3d1977256f3b413ec7f818fb2bf905e0fc04cd131bbb1e69909d84e77be46e44e22b69dcea6908a2d928f061e3f3b625f200cba3f1d319658a08ff9d1b9ae980

  • SSDEEP

    3072:ytJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAe:yJMeucNgckedxCDo/doQVZdZRzzXZQ

Score
10/10
kukishredline

Malware Config

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1620-175-0x00000000010A0000-0x00000000010DE000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections