Overview

overview

10

Static

static

10

1312-622-0...ry.exe

windows7-x64

1312-622-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1312-622-0x0000000000220000-0x000000000025E000-memory.dmp

  • Size

    248KB

  • MD5

    319e18685f6375dfffed4c38ae69cb81

  • SHA1

    fcf1fbaed38a98e501574e78f59e7614be5019cc

  • SHA256

    dc6465482379661b3588b6fdf217085d28d782fc0efebc07be5374cf31566fe8

  • SHA512

    6fc35403236c1a867cdc24e08c2f4ae517f1c41b6c5c738f48647d862db0b03fd5538d966d4d38f2e5297ed38dbef84d806bbbce7c9b10f8abdcdd31eefe6791

  • SSDEEP

    3072:Nung4InXNgcy9Wy3aPGcntCTt/qhGFlvDYLXZiTtzN:6g/XNgcWr3aPu/5FlvDYLpqt

Score
10/10
@ytlogsbotredline

Malware Config

Extracted

Family

redline

Botnet

@ytlogsbot

C2

194.169.175.235:42691

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1312-622-0x0000000000220000-0x000000000025E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections