Overview

overview

10

Static

static

10

2872-122-0...ry.exe

windows7-x64

2872-122-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2872-122-0x0000000000270000-0x00000000002A0000-memory.dmp

  • Size

    192KB

  • MD5

    5df203b9fd24eea0887a5fb91eb27032

  • SHA1

    5e20718f7527b6cfeab7eb55113e3a744533774e

  • SHA256

    96b99e1939ae82832b74348a817b528002c91af29bd8f40506cca233f453bd36

  • SHA512

    27bb962638dd6ebbce19f7fcb76d12392eb479c3533d7790e1e22b9866c68166baa6d026c48961e613320c51cf09500fea3c9e6bdcf6414dc5a0b337b59efbbe

  • SSDEEP

    1536:FlBA36sv0W7T1sjvrHzbNSISuiiB0J57TNyQGxNXLYQLrbuLh8yrEHVF+0GkRk8U:FrqCnNsZWSZ5GxN8yi8yIHVF+78e8hO

Score
10/10
masharedline

Malware Config

Extracted

Family

redline

Botnet

masha

C2

77.91.68.48:19071

Attributes
  • auth_value

    55b9b39a0dae383196a4b8d79e5bb805

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2872-122-0x0000000000270000-0x00000000002A0000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections