Overview

overview

10

Static

static

10

2036-97-0x...ry.exe

windows7-x64

2036-97-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2036-97-0x0000000000250000-0x0000000000280000-memory.dmp

  • Size

    192KB

  • MD5

    f08c58187e2d8f2534f54f98ed86ec1b

  • SHA1

    41b29135a11f73d415fbed5c0b7d1af7283a82ba

  • SHA256

    352bec2cd3ec033bb6304ae41a7a16baddd01f4412ccb464816fdf9c5a3e14e6

  • SHA512

    6398212ce7abab616024fe766fc31fb4600de07329fdb6fcaed3f50b0528dd1201b602e0feddc8c6569140bf2ded0cfa7408242e6b5676f3808817a8b0ab7f51

  • SSDEEP

    3072:26tDiwyqSVghBGfAGtTjxNKifvWPxnD8e8hy:VibuhM5ZmnPxnD

Score
10/10
rovnoredline

Malware Config

Extracted

Family

redline

Botnet

rovno

C2

83.97.73.130:19061

Attributes
  • auth_value

    88306b072bfae0d9e44ed86a222b439d

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2036-97-0x0000000000250000-0x0000000000280000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections