Overview

overview

10

Static

static

10

1776-6-0x0...ry.exe

windows7-x64

1776-6-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1776-6-0x00000000000F0000-0x000000000012C000-memory.dmp

  • Size

    240KB

  • MD5

    aa72b72afb81085596010c620fdc07d6

  • SHA1

    41e71c4a41c0e333e4497f2f6f33ec878fed4cb5

  • SHA256

    f7902564b887fc62dc5fd478a829570457615ec1dfeb1fe27e007682188819ea

  • SHA512

    31786dfeb59deb1be2b8ca6d6ad27d2600fad14d47b9c21780da1b0ec97ae8466e9ceef927a0e10264e7ffcdc887d390940ae4e61d1f2658972fd4e28386387b

  • SSDEEP

    6144:uP+YZ8x7SNgcVYCrx5q2vfO0PX1S+ALFd:uP+YCUNgcVhrCIWuALFd

Score
10/10
livetrafficredline

Malware Config

Extracted

Family

redline

Botnet

LiveTraffic

C2

195.10.205.17:8122

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1776-6-0x00000000000F0000-0x000000000012C000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections