Overview

overview

10

Static

static

10

1672-83-0x...ry.exe

windows7-x64

1

1672-83-0x...ry.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    1672-83-0x00000000002B0000-0x00000000002E0000-memory.dmp

  • Size

    192KB

  • MD5

    efe4fa577a4b7a28ab5d8be469232301

  • SHA1

    f403bcd7e6ee8392996bd81add59624abceba6a5

  • SHA256

    5a195b2a88f1cb6fb5045b5429187a3706e17c818a889b8e902bd16d2dfed7a9

  • SHA512

    754bfde80a8f90edde7d3cd5ba84835b39704b3527bf1841c37166bace36e375f1a4f52cc187d57a794f232dcfb214befbd668847f88d0f4c71c9d4e7b1cfc64

  • SSDEEP

    3072:s47FCYO0NJQ5S0xNcIA7qVJeNGe8e8hy:svd0AEnCVJeNGe

Score
10/10
drakeredline

Malware Config

Extracted

Family

redline

Botnet

drake

C2

83.97.73.131:19071

Attributes
  • auth_value

    74ce6ffe4025a2e4027fb727915e7d7c

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1672-83-0x00000000002B0000-0x00000000002E0000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections