Overview

overview

10

Static

static

10

2756-42-0x...ry.exe

windows7-x64

10

2756-42-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2756-42-0x0000000000270000-0x0000000000640000-memory.dmp

  • Size

    3.8MB

  • MD5

    2d468febf1047b7513c9c83d0db10ac7

  • SHA1

    15e2436a3cf62118051dfd945c39cc8230c6ef95

  • SHA256

    ae5fbd08aa1320477336f7848d1c5dae09e9409446bb38c9c7f51f8c582710e0

  • SHA512

    6e2cb469e0d40b567af1a7d7e9045eacaea773716e2002bc638dc3b18287e01a66171bff68d48b2ce1a2b9ed499d60bb0e3815b7adcb75bcdee210e300e6b5f2

  • SSDEEP

    49152:9zJ0nAy1gzCEDYTCI05nLf723dIGpd0lwY0uiw9oNgz/g8Uwv:9VqAy1nqzI8X2ELhrJz/t

Score
10/10
tg1redline

Malware Config

Extracted

Family

redline

Botnet

TG1

C2

77.91.124.92:33992

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2756-42-0x0000000000270000-0x0000000000640000-memory.dmp
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections