Overview

overview

10

Static

static

10

4196-688-0...ry.exe

windows7-x64

4196-688-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4196-688-0x0000000000730000-0x0000000000782000-memory.dmp

  • Size

    328KB

  • Sample

    240216-bspclaed24

  • MD5

    be7459d58a9b056668ff460b8fb8c9b1

  • SHA1

    6bb133c3f5bf684dcf770549702ddf350296423c

  • SHA256

    020d6075635bb8f22f7ce5d961d984191959c0ce67153df09700456e5e67defa

  • SHA512

    a4582c2812f8655ee4e8484c02a8bf846e49980fa92e8c9370891ec84f35b2c564848c01add4e52079b68f142dda442f2828ea010f55c7c5ddecf498d0cd94bb

  • SSDEEP

    3072:+2GLL3Y8QRrvRLsbMSNXmQogXIdilX+nupxQRmAgkVMRqT6Dv/YheqiOL2bBOU:TobM+eilRxQEAXVMRqT6D4jL

Score
10/10
redlinelegaa

Malware Config

Extracted

Family

redline

Botnet

Legaa

C2

185.172.128.33:38294

Targets

    • Target

      4196-688-0x0000000000730000-0x0000000000782000-memory.dmp

    • Size

      328KB

    • MD5

      be7459d58a9b056668ff460b8fb8c9b1

    • SHA1

      6bb133c3f5bf684dcf770549702ddf350296423c

    • SHA256

      020d6075635bb8f22f7ce5d961d984191959c0ce67153df09700456e5e67defa

    • SHA512

      a4582c2812f8655ee4e8484c02a8bf846e49980fa92e8c9370891ec84f35b2c564848c01add4e52079b68f142dda442f2828ea010f55c7c5ddecf498d0cd94bb

    • SSDEEP

      3072:+2GLL3Y8QRrvRLsbMSNXmQogXIdilX+nupxQRmAgkVMRqT6Dv/YheqiOL2bBOU:TobM+eilRxQEAXVMRqT6D4jL

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks