Overview

overview

10

Static

static

10

2372-81-0x...ry.exe

windows7-x64

2372-81-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2372-81-0x0000000000400000-0x0000000000450000-memory.dmp

  • Size

    320KB

  • MD5

    a3c1c6251c268aac61e875d392f389a4

  • SHA1

    fd30258ab59a34badc4cc52e9d03dffe6afb11f9

  • SHA256

    7f8d3f1c28e7d8de8e530d865749f7a0fd58860e4aea60b508a6f9fa3b8867da

  • SHA512

    f698a51d9f07e520491543982f01ec7b24af482980d36bce99f3f8835fe17a2dcaf7a90d21abaa9bf8850d09a801121a0ab9d6b27726810eb304a6f9c622fcd1

  • SSDEEP

    3072:zqFFrqwIOGLSy+/YtyVFNG+810+Yj2GtwhdukTZbMHIXcZqf7D34VeqiOLCbBO/:OBIOGlIG3dBTZYScZqf7DI/L

Score
10/10
logsdiller cloud (tg: @logsdillabot)redline

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @logsdillabot)

C2

5.42.65.63:14707

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2372-81-0x0000000000400000-0x0000000000450000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections