Overview

overview

10

Static

static

10

2068-10-0x...ry.exe

windows7-x64

2068-10-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2068-10-0x0000000000400000-0x0000000000452000-memory.dmp

  • Size

    328KB

  • MD5

    b3149c0d210d4fe7fbd312874aabd874

  • SHA1

    856c2fe1ecc6a5b6f6c435e75de510aedac3a61c

  • SHA256

    99e6004e9996e6bab5bbfb7e09b45f2858cadb5e52d340d1a041ced149f674fe

  • SHA512

    f088bc5556d91fca0bd3eeee0f06dec7afb652a032c91f7de04c9892a52e049cb26771b63208fb66764462f9534e9d308427e9fce3796d1885c02b4cd1ad40f8

  • SSDEEP

    3072:HcyqhnyFgELfJUkwAKQmrAh1XRnyFJH3Q/n1hj2xy0vcadS2gMRqTjDv/Y3eqiOZ:8OJ8RxyqcaAXMRqTjD4ZL

Score
10/10
@rlreborn cloud (tg: @fatherofcarders)redline

Malware Config

Extracted

Family

redline

Botnet

@RLREBORN Cloud (TG: @FATHEROFCARDERS)

C2

141.95.211.148:46011

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2068-10-0x0000000000400000-0x0000000000452000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections