Overview

overview

10

Static

static

10

1704-0-0x0...ry.exe

windows7-x64

1704-0-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1704-0-0x0000000000220000-0x000000000025E000-memory.dmp

  • Size

    248KB

  • MD5

    09e3bdd7a2d74c45920228012d87b1c4

  • SHA1

    91324691a368c38058dcf34da71b551cb34ff503

  • SHA256

    0e103125450d7d33ac8759d9317c76ba09d45aea6e19a9e6925814aef7c07c03

  • SHA512

    494f46eb9e3c1699b757be710fbd56d8509d40c5311f56a54c652523b5c3892d81f9c9e48f9721002bbb7853232f44410ee4baf6907a8cf6345380ee2f99fdbd

  • SSDEEP

    3072:U3Emyn4NgcHbTfb3UgH+5Kcyt/qDoThyiOnqWCLdkn:gE/4NgcHbrYge5Kj/FThyDnLCL

Score
10/10
yt&team cloudredline

Malware Config

Extracted

Family

redline

Botnet

YT&TEAM CLOUD

C2

194.169.175.235:42691

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1704-0-0x0000000000220000-0x000000000025E000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections