Overview

overview

10

Static

static

10

2160-561-0...ry.exe

windows7-x64

2160-561-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2160-561-0x00000000003C0000-0x00000000003FE000-memory.dmp

  • Size

    248KB

  • MD5

    0ea95d0dd1f3567bfe736c589fea737b

  • SHA1

    b62db7d544987c8862eee64ced14f414d05bd579

  • SHA256

    5bff4b167aece4462f81af1fe5b68b2668c9095951f047bfec86ed370e8e50b4

  • SHA512

    bc9454cde1b84533078ebe91c7ba1e65f17bece7675dc0493758aa31093651b20d349939aeed6086f9de925d1b70f218987683cb347e9a59fd6e06192680b8bc

  • SSDEEP

    6144:QmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:HHQNgcPf1JROBNFygk5

Score
10/10
kinzaredline

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2160-561-0x00000000003C0000-0x00000000003FE000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections