Overview

overview

10

Static

static

10

5780-501-0...ry.exe

windows7-x64

5780-501-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    5780-501-0x0000000000910000-0x000000000094E000-memory.dmp

  • Size

    248KB

  • MD5

    07f906aed9c3ff7fc0b1dc6ba1e4f42d

  • SHA1

    373442b68617de89476eed668803ed40ca0f394f

  • SHA256

    4676212a2252821a9c8451e226433dae288083be96cab768434deb62998860ae

  • SHA512

    7bd72dd69791414fd3d0343663bf2be8da13510b5395d8dffe5b5a28b1532e7ccf10a88622227dc37b04f35e19e864ee8230923dcc7597f9547c5ed03637a55c

  • SSDEEP

    3072:XjJsVUnYNgcDTrB2Sr1DDfNt/qOWGkHCfbLCdrUd2j:XjJsSYNgcDn4SZDzH/oGkHCDL2rUd

Score
10/10
kinderredline

Malware Config

Extracted

Family

redline

Botnet

kinder

C2

109.107.182.133:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5780-501-0x0000000000910000-0x000000000094E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections