Overview

overview

10

Static

static

10

560-83-0x0...ry.exe

windows7-x64

1

560-83-0x0...ry.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    560-83-0x00000000003D0000-0x0000000000400000-memory.dmp

  • Size

    192KB

  • MD5

    5f97ceec9b832713f05ece2237ddfacd

  • SHA1

    7cac6efbc6d0d8f79192775e384f0659803672b7

  • SHA256

    25d3c9bf06e25a84ae3679535dbc850173c2cf843e09e92b068eafdc6d482226

  • SHA512

    6be4f1fe719b4e6aeb3504e8b5499da8d3dca23921d301f72221526dd4d1c25aed2c0191bc6c6b3a3c3105b2f28e38250e972434361d6a70200170b4797f6291

  • SSDEEP

    3072:H47FCYO0NJQ5S0xNcIA7qVJeNGc8e8hy:Hvd0AEnCVJeNGc

Score
10/10
drakeredline

Malware Config

Extracted

Family

redline

Botnet

drake

C2

83.97.73.131:19071

Attributes
  • auth_value

    74ce6ffe4025a2e4027fb727915e7d7c

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 560-83-0x00000000003D0000-0x0000000000400000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections