Overview

overview

10

Static

static

10

1368-13174...ry.exe

windows7-x64

1368-13174...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1368-13174-0x0000000000400000-0x0000000000444000-memory.dmp

  • Size

    272KB

  • MD5

    8fb9de86084e24c2a2e257d57bb1222f

  • SHA1

    f9da88d8b1a3aa4d645718ecc625170ca86e707a

  • SHA256

    ab6042db4f86d13730766e9915c4c00bcb54d0ba265b8f4438af88af16876cf0

  • SHA512

    4a8eaa470fd69584669de9faca1b1e9974a0f519f7a13f363fa534b1d7c0694c854e051d64551fca923a0809a8d56637ccf1ba7e462ede593bed11396b71951d

  • SSDEEP

    6144:T3JJpu3XIX0vqrw/4TbjnIzmz1sZfDY3uxc/fR2Yxyq:Vbu3Xq0v2w/4TbjnIzmz1sZfDY3uxc/T

Score
10/10
torrentoldredline

Malware Config

Extracted

Family

redline

Botnet

TORRENTOLD

C2

amrican-sport-live-stream.cc:4581

Attributes
  • auth_value

    74e1b58bf920611f04c0e3919954fe05

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1368-13174-0x0000000000400000-0x0000000000444000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections