Overview

overview

10

Static

static

10

5600-1063-...ry.exe

windows7-x64

5600-1063-...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    5600-1063-0x0000000002DD0000-0x0000000002E0C000-memory.dmp

  • Size

    240KB

  • MD5

    c44cfcb1adf1e0edf2310b3eccf66ca9

  • SHA1

    e5b9cd2e93fb61fa77aa5c57a529737f5c02b3c9

  • SHA256

    b067e967ed32de9ba82a6aa20d31b6829e58db74afe7cb02815360729abd4d24

  • SHA512

    30a65f23d12dee2cccbb5d34ab115d74d3a74102e5eb68c05dd919f308f6c7e98ebb98ead98b1d798038b5767d24a74e2803373d06e5b2c111d01fccc2b7beef

  • SSDEEP

    6144:TC4gdz070NgcoTrFzO2DzzzzzzHLzzzzzzzrzzzzzzzzzzzzzDzzzzzzL7z30yfE:XO5NgcoTrp9LrorsI

Score
10/10
livetrafficredline

Malware Config

Extracted

Family

redline

Botnet

LiveTraffic

C2

77.105.132.87:6731

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5600-1063-0x0000000002DD0000-0x0000000002E0C000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections