Overview

overview

10

Static

static

10

2788-6-0x0...ry.exe

windows10-1703-x64

Resubmissions

09/08/2024, 15:21

240809-srhbbssckr 10

09/08/2024, 15:19

240809-sqnfyssckm 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2788-6-0x0000000000400000-0x0000000000452000-memory.dmp

  • Size

    328KB

  • MD5

    2391fb34178707d235bbd4fa54027c60

  • SHA1

    3f676b8eac3e78501ca584c2dfe1385e46c53201

  • SHA256

    b2c03e1df3c3e48f830805a1ec475d82998576e56688fd185b005c98afe562ed

  • SHA512

    785fec86225301eb505a4b9c870bf0ed1c96555c0ff395b300bc565e1b062cecfca281209900a600a11f4087a702829d7d492aa333474610abb095ed27a90f6d

  • SSDEEP

    3072:Vq6EgY6i+rUjScAEwPp0DGWWObTACt9SKONcZqf7D349eqiOLibBOb:cqY6iJwPtLObTA+9INcZqf7DIHL

Score
10/10
testredline

Malware Config

Extracted

Family

redline

Botnet

test

C2

45.9.91.71:46967

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2788-6-0x0000000000400000-0x0000000000452000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections