Overview

overview

10

Static

static

10

932-2-0x00...ry.exe

windows7-x64

932-2-0x00...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    932-2-0x0000000000400000-0x0000000000452000-memory.dmp

  • Size

    328KB

  • MD5

    1d5f7173dcd0e609ac5653ea0cc1b025

  • SHA1

    9b505a045a9e20cdf8e1f63af55ccd94173e2d42

  • SHA256

    8ccfb10ebb5e1a1f9cd5ac26103b52003793e38ed3d00da508e9aeee29e4f319

  • SHA512

    7f557fd4ff1e48e34ff30bba02bb0ce4166b1527912de31594668df001202daf9c86c6c56aeb59329218e344cd988ae6a286750645451686918e61faa6d714e0

  • SSDEEP

    3072:tq6EgY6iyhfrUjHcQZwP7QvU3aa3SeVwTAxtASK1lcZqf7D34teqiOLibBOs:EqY6iyhawPGuVwTAHAPlcZqf7DIXL

Score
10/10
@oleh_pspredline

Malware Config

Extracted

Family

redline

Botnet

@OLEH_PSP

C2

185.172.128.33:8970

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 932-2-0x0000000000400000-0x0000000000452000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections