Overview

overview

10

Static

static

10

2728-2607-...ry.exe

windows7-x64

2728-2607-...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2728-2607-0x0000000000BA0000-0x0000000000BDC000-memory.dmp

  • Size

    240KB

  • MD5

    3e4bb051111231e99ad956f011defa46

  • SHA1

    6a2010c222b227c134465998833039648452508e

  • SHA256

    9dbc1adcf3fe5c6b6f252b7c5cc88ce0d892fce7c5973bebc81a5272c4b1129e

  • SHA512

    379df940d6d938c78450531760d2666a89ed14c929b5a2b83249cd56cfc31fac3fee9576e937cc627564022177291495c3cbdc26f386e3695a4c796baa873379

  • SSDEEP

    6144:UZQSq7dNgcFKsrSJkkpj/Ux74c0d01SH0xWSwMPGO:UZQBNgcMsrIjgMcy0xWSwMPGO

Score
10/10
@oleh_psredline

Malware Config

Extracted

Family

redline

Botnet

@oleh_ps

C2

176.123.7.190:32927

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2728-2607-0x0000000000BA0000-0x0000000000BDC000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections