Overview

overview

10

Static

static

10

2884-267-0...ry.exe

windows7-x64

2884-267-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2884-267-0x00000000000F0000-0x000000000012E000-memory.dmp

  • Size

    248KB

  • MD5

    ed78482b5770d61e493d8c45df389340

  • SHA1

    d2d356cc446213dd157fd57afa38e18514eded08

  • SHA256

    824e7b25df87f075763230a301311d64232198025d32c5f4655c639e18f68a7a

  • SHA512

    3df0847187eef1f61ff33cfdd7fdf6b605cfb07cfc99fe9cd4c855c470d335e95af35a2650fce203f6d90da194e4027869084f5b6a2f22f721f99f19039abb8b

  • SSDEEP

    3072:YtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAw:YJMeucNgckedxCDo/doQVZdZRzzXZQ

Score
10/10
kukishredline

Malware Config

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2884-267-0x00000000000F0000-0x000000000012E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections