Overview

overview

10

Static

static

10

280-83-0x0...ry.exe

windows7-x64

1

280-83-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    280-83-0x0000000000250000-0x0000000000280000-memory.dmp

  • Size

    192KB

  • MD5

    7d85b798becf23cd632d02b29b17eeb2

  • SHA1

    8204355eb3541f589bbbaa787f84dd295d324b06

  • SHA256

    2778d972277809f095e7e3e2cdcbd28dfcd38b1dabf15041a05cbd9cb98d5121

  • SHA512

    9ed9758e120cb20c88a7ed189a98a58f1f877c2bfc30abf8c660aeb8044a242422acd1618c5a9b15e3c8ad294c58cb3b17824914bc637590a8ca4fc9ee1fb20a

  • SSDEEP

    3072:W47FCYO0NJQ5S0xNcIA7qVJeNGU8e8hy:Wvd0AEnCVJeNGU

Score
10/10
drakeredline

Malware Config

Extracted

Family

redline

Botnet

drake

C2

83.97.73.131:19071

Attributes
  • auth_value

    74ce6ffe4025a2e4027fb727915e7d7c

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 280-83-0x0000000000250000-0x0000000000280000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections