Overview

overview

10

Static

static

10

868-97-0x0...ry.exe

windows7-x64

868-97-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    868-97-0x0000000000270000-0x00000000002A0000-memory.dmp

  • Size

    192KB

  • MD5

    112bc0586711195ac8cf4667f4dc8eae

  • SHA1

    69569aec63026458371201d8d255e4ed6fad96b6

  • SHA256

    cb5dba3ffe373eda3452cb8ed8c7bd24c8f306210e5cfa56a39532aae0e9a1d6

  • SHA512

    b72f0f93085cd071cebb717abbdf2d4141236c985c455f0fe5fb9aa2abce4b01bb22a8d4e1d7fe04cff7653404e81adb3d72a301fb973bf6cb0438305cd9fcd4

  • SSDEEP

    1536:xhADkhez36sv0W7TXL0jrHCOXiyfiLhwxNPlYQPnbufbTRGFZ/Xh0GkR28e8hs:cYwJ7hOXiqkhwxN2iGFGFZ/XhR8e8hs

Score
10/10
jokerredline

Malware Config

Extracted

Family

redline

Botnet

joker

C2

83.97.73.130:19061

Attributes
  • auth_value

    a98d303cc28bb3b32a23c59214ae3bc0

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 868-97-0x0000000000270000-0x00000000002A0000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections