Overview

overview

10

Static

static

10

1980-61-0x...ry.exe

windows7-x64

10

1980-61-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1980-61-0x0000000000680000-0x00000000006B4000-memory.dmp

  • Size

    208KB

  • MD5

    43cf97f8c0c7ecaa7791cfb0b379c66c

  • SHA1

    945d6d5c570eb8aab84f6e1366d3ec88ce84d1c5

  • SHA256

    cdcd5a34b52bc818646d5506c2e4bafd5b300d057e1d674f651669ea4e9a094a

  • SHA512

    95dceab0d4d51cd72febbe60a1a8245dff1d534201c346a89ceaaecd69e27fdebcf29965b1753989010d8ed1d88471297dcf542b1102971a0160cc9ac78ec219

  • SSDEEP

    3072:E7Cs69KyIoAwIQE+V2BmnrkMS8bx4+nIzCv8e8hKvM:sCs6KoAwDkMLbxMSJM

Score
10/10
logsdiller cloud (bot: @logsdillabot)redline

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Bot: @logsdillabot)

C2

147.135.165.22:17748

Attributes
  • auth_value

    ed000008c0b59caf793b48c8ea9a7233

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1980-61-0x0000000000680000-0x00000000006B4000-memory.dmp
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections