Overview

overview

10

Static

static

10

2584-667-0...ry.exe

windows7-x64

2584-667-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2584-667-0x0000000000D60000-0x0000000000D9E000-memory.dmp

  • Size

    248KB

  • MD5

    cb52385bb9425d2294d6fed91e5657b0

  • SHA1

    6c84216eb05c6f565702bbbda7a56234c599281a

  • SHA256

    eb0bef74e0d82c4aec90d8a3880a51cc65e612885bdb591c78ab7100142b6aa3

  • SHA512

    c9dd4fdf1be92cb2fe2c303a52eff6180b22bbdd3ed6c1abddad5aefae2bcda69e8a815e066239c8c066da962cc94b952774a4a694f4a2a0a091cdf12cddfede

  • SSDEEP

    3072:8ihvLpYnXNgc+jZ44OLqNaKe/Gbt/q6ubZovTqpwUybFhyp:8+lYXNgc+144OLquOZ/CZovTqHybFh

Score
10/10
gromeredline

Malware Config

Extracted

Family

redline

Botnet

grome

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2584-667-0x0000000000D60000-0x0000000000D9E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections