Overview

overview

10

Static

static

10

1944-1148-...ry.exe

windows7-x64

1944-1148-...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1944-1148-0x0000000000400000-0x0000000000432000-memory.dmp

  • Size

    200KB

  • Sample

    240303-qkh8yaba6x

  • MD5

    a7c4217e7fc273cd47ae55adb0f5416d

  • SHA1

    61f39ff9c2cf859e5dd31de2e9e3924b22e9316e

  • SHA256

    4941280f98ee74daafc021522b46cdf5f36dc5ec46106ec4a937c25923466711

  • SHA512

    2424ce1c9bac5758e61abc6ffe72a0bdc5f872ed979864bcf3c8f07c34a6d83051d856fa6f6b885dfbd28b9f7964a7618240696cf72fe1f3109ab9fd7d3f1532

  • SSDEEP

    3072:FxqZWBRanU2n08g4uTceW8FyhAPxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOum:PqZY8g4iVyh

Score
10/10
redlinengan003

Malware Config

Extracted

Family

redline

Botnet

ngan003

C2

199.115.193.116:11300

Attributes
  • auth_value

    b500a5cf0cb429e32a81c6ddcd8d4545

Targets

    • Target

      1944-1148-0x0000000000400000-0x0000000000432000-memory.dmp

    • Size

      200KB

    • MD5

      a7c4217e7fc273cd47ae55adb0f5416d

    • SHA1

      61f39ff9c2cf859e5dd31de2e9e3924b22e9316e

    • SHA256

      4941280f98ee74daafc021522b46cdf5f36dc5ec46106ec4a937c25923466711

    • SHA512

      2424ce1c9bac5758e61abc6ffe72a0bdc5f872ed979864bcf3c8f07c34a6d83051d856fa6f6b885dfbd28b9f7964a7618240696cf72fe1f3109ab9fd7d3f1532

    • SSDEEP

      3072:FxqZWBRanU2n08g4uTceW8FyhAPxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOum:PqZY8g4iVyh

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks