Overview

overview

10

Static

static

10

4936-52-0x...ry.exe

windows7-x64

4936-52-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    4936-52-0x0000000000400000-0x0000000000452000-memory.dmp

  • Size

    328KB

  • MD5

    552342df3e0151440735e99070507d4e

  • SHA1

    696c41b72591d2158d6bc3b9ccef53894ee87987

  • SHA256

    8f7b33fe921fcd43748e93bb256f4bc6487925ed7b228ea2c363b8d10206c32f

  • SHA512

    0a29ede36ea34ab9a7e5d1804addf687c7369c4b33dab6c60a1c83c9377fa51d1c5357a5b57334f09205decdf0bb6ec6431854f2052dcd6f3afd251b2d6dba33

  • SSDEEP

    3072:9q6EgY6iQrUjY18OwPKD/UIGBxTA+t5SKq9cZqf7D34NeqiOLibBOJ:UqY6iUwPM8BxTAK5w9cZqf7DI3L

Score
10/10
redline

Malware Config

Extracted

Family

redline

C2

5.42.92.179:18418

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4936-52-0x0000000000400000-0x0000000000452000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections