Overview

overview

10

Static

static

10

2852-12-0x...ry.exe

windows7-x64

2852-12-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2852-12-0x00000000001F0000-0x000000000022C000-memory.dmp

  • Size

    240KB

  • MD5

    ac815783935e2b7987192d4b0ca35ed0

  • SHA1

    7d7d15f1056e32f54408f3d71d19fccf0d9981fc

  • SHA256

    56835a2e05143b5689e83ba4b0a3cf25ce2046555cb2f607d9bb8f4ff7960b9b

  • SHA512

    c6b0a47e85472e2647a8f313972e2836b37b5ddd791b6f37d60f41bd255e38dfce41dd3c581f0cf3eb9eb5e953090751c26d423fd7410dc75f68363b094888ea

  • SSDEEP

    6144:FC4gdz070NgcoTrFzO2DzzzzzzHLzzzzzzzrzzzzzzzzzzzzzDzzzzzzL7z30yfE:xO5NgcoTrp9LrorsI

Score
10/10
livetrafficredline

Malware Config

Extracted

Family

redline

Botnet

LiveTraffic

C2

77.105.132.87:6731

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2852-12-0x00000000001F0000-0x000000000022C000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections