Overview

overview

10

Static

static

10

2944-9-0x0...ry.exe

windows7-x64

2944-9-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2944-9-0x0000000000400000-0x0000000000452000-memory.dmp

  • Size

    328KB

  • MD5

    782c5c61f1670ab6c8b8e4770ccea52e

  • SHA1

    bfe48118883ef40b1eed67451570be6103788bdf

  • SHA256

    43c977af309b850e0ad3584bf356107a22d2752a6f7562de8df7309c8efc0166

  • SHA512

    8452889ff9661190e9e7ab81b7b15b9ddd7ab7a96d853a454d62e2247d090838502e5df6277e69ae5f8a8a98b22a052a22a640da5dbc160707b1542a0389bd60

  • SSDEEP

    3072:T2hL4bYLQHhrlL+brrNvsEOacCK9sEdYYX0nVlmoYKxLsRqAgkVMRqT6Dv/YCeq2:SbbrTcCWYYYmo1xLsoAXVMRqT6D4QL

Score
10/10
logsdiller cloud (telegram: @logsdillabot)redline

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

195.20.16.188:20749

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2944-9-0x0000000000400000-0x0000000000452000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections