Overview

overview

10

Static

static

10

1984-97-0x...ry.exe

windows7-x64

1984-97-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1984-97-0x0000000000250000-0x0000000000280000-memory.dmp

  • Size

    192KB

  • MD5

    66ebe0d77d1b2da6da797dd1321c1269

  • SHA1

    5a46cfe82cadffc4eb8b678db119ee9a49098937

  • SHA256

    4b6db32d4d08ab0f17dca3d4fb2eaca0e079109348b8f554fb183c70699047f3

  • SHA512

    eb871b5e02f7cbf171c055412ab0381d6d9130cffb2fc0e67a5790745f58277c5292728662b5b52bb775b672c74d5fc4dd39eb2c582f53aab9cf2b21b62f5901

  • SSDEEP

    1536:mhADkhez36sv0W7TXL0jrHCOXiyfiLhwxNPlYQPnbufbTRGFZ/Xh0GkR48e8hs:BYwJ7hOXiqkhwxN2iGFGFZ/Xhb8e8hs

Score
10/10
jokerredline

Malware Config

Extracted

Family

redline

Botnet

joker

C2

83.97.73.130:19061

Attributes
  • auth_value

    a98d303cc28bb3b32a23c59214ae3bc0

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1984-97-0x0000000000250000-0x0000000000280000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections