Overview

overview

10

Static

static

10

2932-104-0...ry.exe

windows7-x64

1

2932-104-0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2932-104-0x0000000000400000-0x000000000043E000-memory.dmp

  • Size

    248KB

  • MD5

    1982d13e1935c490018c607b146a84b4

  • SHA1

    0f104f297905a026dca09eb6806d072783b1fc38

  • SHA256

    188652015e6d2a41001c24897ac12e4a6cd001d5787b789ca6ee2b6bfec8fa9d

  • SHA512

    a510874105da0ec79530d6251f78a841f1259ea7f598e645ac9a3a464e8570233c4495718725cab04fe323c85474ad80eedf86f0f4f9b216b6e958ead26c10a6

  • SSDEEP

    6144:8lsWUnzNgckqYn22mr/Wn449ZQyrevpM:qshzNgckq5oTTrevpM

Score
10/10
logsdiller cloud (tg: @logsdillabot)redline

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @logsdillabot)

C2

171.22.28.236:38306

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2932-104-0x0000000000400000-0x000000000043E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections