Overview

overview

10

Static

static

10

1744-54-0x...ry.exe

windows7-x64

1744-54-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1744-54-0x0000000000230000-0x0000000000256000-memory.dmp

  • Size

    152KB

  • MD5

    3736f53406272e354e7e73ee584e5919

  • SHA1

    739971eb7ea06670e93f5a86967294eb11ae16c0

  • SHA256

    6a7215d888cceb0f3a74e5f683f0dd6bcb8253334308289c5ebd6f6f94deecc9

  • SHA512

    37a68e7a0d96382db4d041add7674cbe0d20bfd4f96b3c432e79f7885dc1288b1ac485dc66fe9854f0440973cd2c02e420f85129cf9ea65ea347d4fcc5799585

  • SSDEEP

    1536:0laCGcnVHT1u/o3Q5O6+f7NWy9Fu/OYmtZhZja9bV7e/8H72HsYgibfbFDKsRq:0oNcZZgKjNWgurm90NU0HfYgafJlq

Score
10/10
yt&team logsredline

Malware Config

Extracted

Family

redline

Botnet

YT&TEAM LOGS

C2

176.123.9.85:16482

Attributes
  • auth_value

    63cc484234216dace4114bc03617721b

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1744-54-0x0000000000230000-0x0000000000256000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections