Overview

overview

10

Static

static

10

2836-102-0...ry.exe

windows7-x64

2836-102-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2836-102-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    2f7cc19d5de8620454fef752f4496e49

  • SHA1

    a23003cd084f5fc05761fa3721e959216b5215d7

  • SHA256

    392514fe22caec1e09dac14a406b695273d408cd18dddedc1c703568b09d4f0c

  • SHA512

    9badb9f6d1edba74d69615811c22866639dba9431284ed68f0f4db48647f97b982794210ac3ed70e4a6c8dcf6d6a52740979a1a6e4584596dee43587a6415cdf

  • SSDEEP

    1536:zNqwShx9JT+36sv0W7T6eemErHhWCyswYXbV+exNEeYQvjbuKK46HDckE90GkRkg:UDh9TYfkWsJXMexNsui/jckE9n8e8hD

Score
10/10
150723_rc_11redline

Malware Config

Extracted

Family

redline

Botnet

150723_rc_11

C2

rcam15.tuktuk.ug:11290

Attributes
  • auth_value

    0b3645317afbcac212f68853bb45b46d

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2836-102-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections