Overview

overview

10

Static

static

10

2288-0-0x0...ry.exe

windows7-x64

2288-0-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2288-0-0x0000000000070000-0x0000000000092000-memory.dmp

  • Size

    136KB

  • MD5

    b95e86ebbfdb39ed30ea0ede223c4b67

  • SHA1

    945c158597587f75518e9ed297f967d3a237a83c

  • SHA256

    18ab3ddc792be278fd8662754a948268ad41f00348483992eb62c87feea3639b

  • SHA512

    4004f8a4fd73600426b52071d4ac5a30288c6cfbdd02d63e42d6be1b77a3aae0d78a42ec0c973a1b34b1e1161eec06e7feea1f1d15b306026a5073ff01f9e3a3

  • SSDEEP

    1536:gAbbDr5JdAmS4lZyNVxCuCk+q6wN4c3oJQpZ6FSnH8Nby+xXm8lMg8HI6C:g87k+q6wN8oaYmyoWv7o6C

Score
10/10
6077866846redline

Malware Config

Extracted

Family

redline

Botnet

6077866846

C2

https://pastebin.com/raw/KE5Mft0T

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2288-0-0x0000000000070000-0x0000000000092000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections