Overview

overview

10

Static

static

10

2664-149-0...ry.exe

windows7-x64

2664-149-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2664-149-0x0000000000240000-0x000000000027C000-memory.dmp

  • Size

    240KB

  • MD5

    50352333f64c2aacf6d63f010a51882a

  • SHA1

    f507ffca650573fe3c1ef7ff63814c5f04f3ca1a

  • SHA256

    62ae8e5703a8704dbcc724c7d85cd95bdf8e611c2b071a7141039732d97ae473

  • SHA512

    32d1c35e0419d898e98eab3c4dc8f87373c3f9d7c66eb4bc9002eb4c6f1c2e5ae8f0ae16a64373f0271ef49767c3dfbcfff99783d3ac350b16b1bf01628db8f6

  • SSDEEP

    6144:sZQSq7dNgcFKsrSJkkpj/Ux74c0d01SH0xWSwMPGO:sZQBNgcMsrIjgMcy0xWSwMPGO

Score
10/10
@oleh_psredline

Malware Config

Extracted

Family

redline

Botnet

@oleh_ps

C2

176.123.7.190:32927

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2664-149-0x0000000000240000-0x000000000027C000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections