Overview

overview

10

Static

static

10

588-97-0x0...ry.exe

windows7-x64

588-97-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    588-97-0x0000000000280000-0x00000000002B0000-memory.dmp

  • Size

    192KB

  • MD5

    294945cc0e2e5115645f1630f570b504

  • SHA1

    f8cbcbb648145511b80aebff98bfff36125452e3

  • SHA256

    7a26f03fe201e5a96c3d407a72e8de2d2435b9004f5295956c0546c17e29b45e

  • SHA512

    84345ff61ee74cd504306365c0791c984ffd3f1fd0f2149f80f2e4231e5d2dc4c062c2f52fbf0a9d416e836d78ad824deaf68441a9f7e2c9f9bb48a2093f1e39

  • SSDEEP

    1536:ODrRuq1Ps36sv0W7TRVOQM6fwrHwhn/rQbg5fb25LxNcqYQHnbuxaNLQmpTu0Gks:S8sO/O2DnEba0LxNEyPNcmpTua8e8hT

Score
10/10
kiraredline

Malware Config

Extracted

Family

redline

Botnet

kira

C2

77.91.68.48:19071

Attributes
  • auth_value

    1677a40fd8997eb89377e1681911e9c6

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 588-97-0x0000000000280000-0x00000000002B0000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections