Overview

overview

10

Static

static

10

2256-8-0x0...ry.exe

windows7-x64

2256-8-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2256-8-0x0000000000400000-0x0000000000454000-memory.dmp

  • Size

    336KB

  • MD5

    64afc5770949c36e496721fb5b6abcd3

  • SHA1

    8221c85ac977166b42465403879ff7535cd3e85c

  • SHA256

    2ba8fb7233809c1b77acb3091f101b4a88f52a071327115cae371b6eda8c449f

  • SHA512

    f2f45e696b43bb7bb4263e11d3c38dc2b53d29711e50bfa71bfe41fa97c6241e9be4692e8868308cfb2f4dbcee5f5507919599c7eeb503fc13acdd3e85a2f08b

  • SSDEEP

    3072:QA0xOp+R+vdVwKRPFuDt9dV8GnnHt1rxn9TRMRqfjDv/Y:49idpFI3DrxnbMRqfjD4

Score
10/10
livetrafficredline

Malware Config

Extracted

Family

redline

Botnet

LiveTraffic

C2

20.79.30.95:33223

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2256-8-0x0000000000400000-0x0000000000454000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections