Overview

overview

10

Static

static

10

1920-42-0x...ry.exe

windows7-x64

1920-42-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1920-42-0x0000000000060000-0x00000000000B4000-memory.dmp

  • Size

    336KB

  • MD5

    89e8a2f9607b400dec6a9a1d63de93c0

  • SHA1

    fd3bad01e76d4e0f228e897eb401421bc052df05

  • SHA256

    0bb5d7418be1e1b219299d738dc2ee43d822447f8174e46eef9902db7d6d4f2e

  • SHA512

    204ebe37a3fd4f279b7d7cbd3bf38c73ab229fda1de6a3be65acfe89fef3a6c87076a24c0728c4b3bc0e0ba5ffabdd01f75a45ac365fda36d520b3fde2dcb896

  • SSDEEP

    3072:QA0UpT1W+9dAoDc0ib8fy+8EnelxlmyxkMRqfjDv/YUeqiOL2bBOJ:4sHdGjb8KNxADMRqfjD4aL

Score
10/10
1redline

Malware Config

Extracted

Family

redline

Botnet

1

C2

92.222.212.74:1450

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1920-42-0x0000000000060000-0x00000000000B4000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections