Overview

overview

10

Static

static

10

4212-149-0...ry.exe

windows7-x64

4212-149-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4212-149-0x00000000001D0000-0x0000000000200000-memory.dmp

  • Size

    192KB

  • Sample

    240310-g9r3psec49

  • MD5

    da405f72ebb638f866378f72276ac428

  • SHA1

    b8dc9d56fa8317a6e1be912e3b2f30d163f9a837

  • SHA256

    049a877bb83d268ac87dcd42530d1f06a7b6281ab7960c9db20e362d2cdac2c4

  • SHA512

    f3847c2face64860d2840d191ff4a9f155ff94c7b1727b05ad53a8d70432ac8b0d7acd64f0d04e9aaf28878930e5ac476cbf428f444aa6c687a001a080d598df

  • SSDEEP

    1536:WXzGzxuk36sv0W7TscooTrH6TuUa809jL1axN8oYQ/1buuatDaUFewS0GkRv8e8F:WXq8WHmiVrBaxNagg5aUFewS88e8hX

Score
10/10
redlineboris

Malware Config

Extracted

Family

redline

Botnet

boris

C2

83.97.73.129:19068

Attributes
  • auth_value

    205e4fccc0f8c7da1d56fb1da4ac5e6a

Targets

    • Target

      4212-149-0x00000000001D0000-0x0000000000200000-memory.dmp

    • Size

      192KB

    • MD5

      da405f72ebb638f866378f72276ac428

    • SHA1

      b8dc9d56fa8317a6e1be912e3b2f30d163f9a837

    • SHA256

      049a877bb83d268ac87dcd42530d1f06a7b6281ab7960c9db20e362d2cdac2c4

    • SHA512

      f3847c2face64860d2840d191ff4a9f155ff94c7b1727b05ad53a8d70432ac8b0d7acd64f0d04e9aaf28878930e5ac476cbf428f444aa6c687a001a080d598df

    • SSDEEP

      1536:WXzGzxuk36sv0W7TscooTrH6TuUa809jL1axN8oYQ/1buuatDaUFewS0GkRv8e8F:WXq8WHmiVrBaxNagg5aUFewS88e8hX

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks