Overview

overview

10

Static

static

10

2440-80-0x...ry.exe

windows7-x64

2440-80-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2440-80-0x0000000000400000-0x0000000000450000-memory.dmp

  • Size

    320KB

  • MD5

    8467b86e9743891d794b3c283296ffd6

  • SHA1

    cc97d11ffc203881b55a80ced43ea3faeec9db26

  • SHA256

    bc5a67844e5889b33f99f27a05036ef2942fd185828a6d928155f5925000f865

  • SHA512

    e3b34a384343cd79b9b170c4faa3cbc24ff2708fa11c054bc4bd217988613f5cbec1df5e82be280074f99d88221dcf0af617a17ee696e3ad844621b07bd879a6

  • SSDEEP

    3072:3qFFrqwIOGLSy+/YtyVFNG+810+Yj2GtwhdukTZbMHIXcZqf7D34VeqiOLCbBO/:6BIOGlIG3dBTZYScZqf7DI/L

Score
10/10
logsdiller cloud (tg: @logsdillabot)redline

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @logsdillabot)

C2

5.42.65.63:14707

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2440-80-0x0000000000400000-0x0000000000450000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections