Overview

overview

10

Static

static

10

2552-241-0...ry.exe

windows7-x64

2552-241-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2552-241-0x0000000000220000-0x000000000025E000-memory.dmp

  • Size

    248KB

  • MD5

    d5d98079641db27b24587eb7bc11178a

  • SHA1

    3064df69b2ecac4a269569470d0130f2c1f62f32

  • SHA256

    6c707498fd88f1da270c09a58e59ce8e01e6c5b802289179001cefb88c94c7e5

  • SHA512

    68efbfc500fb2449787163a5d2ff75c187736d00f6f954cc716e71a89a4d86fca12d3e9451f6005a53a9db30ee72d74f3cd905aaa20a0debc0fcb36866b6ba5f

  • SSDEEP

    3072:NHng4InXNgcy9Wy3aPGcntCTt/qhGFlvDYLXZiTtzN:xg/XNgcWr3aPu/5FlvDYLpqt

Score
10/10
@ytlogsbotredline

Malware Config

Extracted

Family

redline

Botnet

@ytlogsbot

C2

194.169.175.235:42691

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2552-241-0x0000000000220000-0x000000000025E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections