Overview

overview

10

Static

static

10

2744-12-0x...ry.exe

windows7-x64

2744-12-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2744-12-0x00000000000F0000-0x000000000012C000-memory.dmp

  • Size

    240KB

  • MD5

    b179616a4587334024cc7185ddd8194b

  • SHA1

    1dc885d7d6f5ce8c82640427e336c937fb511b73

  • SHA256

    1e4cab23df8616a930b3af816a583b8190286fe1713f333b7cc0bfa230a9176f

  • SHA512

    f5daa85796715f54afdc3c8f40b4b540590653db0bb33431014daf8c604e12bef06081dbdc55aa0b283369b8ba5759dbc6cdb009d083cc69da132744fb908527

  • SSDEEP

    3072:9oreQfv7oNgcz31oPrSnZwNRwluWRSdtw1SIwJPdqvKSX:9oKiv7oNgczCPrIMyT0nw1SZBdqC

Score
10/10
livetrafficredline

Malware Config

Extracted

Family

redline

Botnet

LiveTraffic

C2

77.105.132.87:17066

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2744-12-0x00000000000F0000-0x000000000012C000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections