Overview

overview

10

Static

static

10

2848-667-0...ry.exe

windows7-x64

2848-667-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2848-667-0x0000000000CE0000-0x0000000000D1E000-memory.dmp

  • Size

    248KB

  • MD5

    987efb7b554c788e14a234d6c81cc595

  • SHA1

    1166ec2ed1a01d2b28cb6266eca28cdb2937409b

  • SHA256

    4f119efe2d6576fac92cf59a8e9e801d59c7cb334d3bff68dc7b5e17536a7da3

  • SHA512

    52128626fc859e6840f715282267fbb0a9a4bb3f2f04e13ddf843ef024b6de05570e517f0af3e82d11014ee5e65dea76931cedb2f717d48dfa9e7ae1cc3af10d

  • SSDEEP

    3072:MihvLpYnXNgc+jZ44OLqNaKe/Gbt/q6ubZovTqpwUybFhyR:M+lYXNgc+144OLquOZ/CZovTqHybFh

Score
10/10
gromeredline

Malware Config

Extracted

Family

redline

Botnet

grome

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2848-667-0x0000000000CE0000-0x0000000000D1E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections