Overview

overview

10

Static

static

10

2744-505-0...ry.exe

windows7-x64

2744-505-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2744-505-0x00000000003C0000-0x00000000003FE000-memory.dmp

  • Size

    248KB

  • MD5

    5f476832e829988a0c65ac3c534c2014

  • SHA1

    ca81729db8048998c1c3d0c95f3f8c12f09787a2

  • SHA256

    651157f7d52f47e63430654471ada74b43a20a6d798fd2eb6565a5d6aa343293

  • SHA512

    5ff4c2409955acb15d8cc0d52f5eff64add4735266f9ca11ecc1fa888bba2fcf370bc5cd5dd0f018dcb166f239ec4eb0e33f4168a70e028ce81c22f6c495dd00

  • SSDEEP

    3072:AihvLpYnXNgc+jZ44OLqNaKe/Gbt/q6ubZovTqpwUybFhy3:A+lYXNgc+144OLquOZ/CZovTqHybFh

Score
10/10
gromeredline

Malware Config

Extracted

Family

redline

Botnet

grome

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2744-505-0x00000000003C0000-0x00000000003FE000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections