Overview

overview

10

Static

static

10

1476-97-0x...ry.exe

windows7-x64

1

1476-97-0x...ry.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1476-97-0x00000000003D0000-0x0000000000400000-memory.dmp

  • Size

    192KB

  • MD5

    88a241de3b9191718e7cc1eea10505d0

  • SHA1

    ccab3e6e5db28c2baf2b8f371d024b317d7df5a6

  • SHA256

    a702679d58fa69a40f77eafe996170230f1559b797d5f53a009ac314696b1dc7

  • SHA512

    a13293207862dd1aa1cce798d1161b63bf9b5240a28336c0874f9ba83cce9ec8381d20352a352c7358bc893a667102145d5d10cdec7fa59fdde3483ab2f0fc62

  • SSDEEP

    3072:147FCYO0NJQ5S0xNcIA7qVJeNGc8e8hy:1vd0AEnCVJeNGc

Score
10/10
drakeredline

Malware Config

Extracted

Family

redline

Botnet

drake

C2

83.97.73.131:19071

Attributes
  • auth_value

    74ce6ffe4025a2e4027fb727915e7d7c

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1476-97-0x00000000003D0000-0x0000000000400000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections