Overview

overview

10

Static

static

10

2136-197-0...ry.exe

windows7-x64

2136-197-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2136-197-0x00000000000F0000-0x000000000012C000-memory.dmp

  • Size

    240KB

  • MD5

    22398e1332fe3bde16c0974599598a48

  • SHA1

    0029ab4da2c2cfbf016d5618fa64a7eaf6780c70

  • SHA256

    85515085d95854bfee20fe7a6b3899d5ba5db0b72e165c1c18d55ec4c9436001

  • SHA512

    861608546340ca7a081bfbaf5efce0b9de9bb4b4d3f554b3a5dc1291efd2a1db7faf63e0c04f99356aafede52c6e5b35bc7952d33ccff91fb7ef4dc09e53ef2c

  • SSDEEP

    3072:4oreQfv7oNgcz31oPrSnZwNRwluWRSdtw1SIwJPdqvKSX:4oKiv7oNgczCPrIMyT0nw1SZBdqC

Score
10/10
livetrafficredline

Malware Config

Extracted

Family

redline

Botnet

LiveTraffic

C2

77.105.132.87:17066

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2136-197-0x00000000000F0000-0x000000000012C000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections