Overview

overview

10

Static

static

10

4032-801-0...ry.exe

windows7-x64

4032-801-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4032-801-0x0000000000D00000-0x0000000000D52000-memory.dmp

  • Size

    328KB

  • Sample

    240105-eg6dhshecm

  • MD5

    4908518620bb56132cbaa104bc6e1c31

  • SHA1

    07625e3f3c0030a1c1aeed0c9aae50f844861006

  • SHA256

    3dd0d1fac243bc240f331299956795d7bc55c7f9bad4a16bc3685abd7a28deec

  • SHA512

    1a36bcc19985af136c92a24e539055d6148563e000b2e77dd55e64a4864c232d61995fa0f5207c3777d2bf96fdecb4f62ed26dd5a511b21434b8142fc14471e5

  • SSDEEP

    3072:12GLL3Y8QRrvRLsbMSNXmQogXIdilX+nupxQRmAgkVMRqT6Dv/YSeqiOL2bBOU:sobM+eilRxQEAXVMRqT6D4AL

Score
10/10
redlinelegaa

Malware Config

Extracted

Family

redline

Botnet

Legaa

C2

185.172.128.33:38294

Targets

    • Target

      4032-801-0x0000000000D00000-0x0000000000D52000-memory.dmp

    • Size

      328KB

    • MD5

      4908518620bb56132cbaa104bc6e1c31

    • SHA1

      07625e3f3c0030a1c1aeed0c9aae50f844861006

    • SHA256

      3dd0d1fac243bc240f331299956795d7bc55c7f9bad4a16bc3685abd7a28deec

    • SHA512

      1a36bcc19985af136c92a24e539055d6148563e000b2e77dd55e64a4864c232d61995fa0f5207c3777d2bf96fdecb4f62ed26dd5a511b21434b8142fc14471e5

    • SSDEEP

      3072:12GLL3Y8QRrvRLsbMSNXmQogXIdilX+nupxQRmAgkVMRqT6Dv/YSeqiOL2bBOU:sobM+eilRxQEAXVMRqT6D4AL

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks