Overview

overview

10

Static

static

10

5140-611-0...ry.exe

windows7-x64

5140-611-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5140-611-0x00000000001C0000-0x00000000001DE000-memory.dmp

  • Size

    120KB

  • MD5

    37f7652c5bfe7a3cd6c60babb18242b3

  • SHA1

    b8f15697c886561c0075356c2afaefa0df6938b8

  • SHA256

    9c1a93436dc78c84117195d7be4ebf5e1dca00b8e5f1dbb35ff49f4378c5a3d3

  • SHA512

    0efe95222878e0ca1e9de1050644a76bae7a00338f98ea06399838efbb6c22a0a6a2355118039c32b0c25dbfbd1dddc1bc39f9c57954ba92dfbaccf7df642c28

  • SSDEEP

    3072:93HcjBPe7NerE+CrFkDSuOkZDcXiqEqVRI:9eGKDRAX1

Score
10/10
5141679758_99redline

Malware Config

Extracted

Family

redline

Botnet

5141679758_99

C2

https://pastebin.com/raw/8baCJyMF

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5140-611-0x00000000001C0000-0x00000000001DE000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections