Overview

overview

10

Static

static

10

3804-297-0...ry.exe

windows7-x64

3804-297-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    3804-297-0x0000000000220000-0x0000000000272000-memory.dmp

  • Size

    328KB

  • MD5

    9888813217cfa9072b5ab446a0e8a9df

  • SHA1

    e11d07384a1a70e433c9fabc14509c5988af4104

  • SHA256

    2d2567809e458c1e8e4b7d41a95d549465dab2dc1db5a9293171056c3b85812a

  • SHA512

    075651bd1585f25f4dfb5c0ee3cf181d1de8f7564f656a0eaecc1dd816216a3550a4bd1db8851a657971366cf83ebd925ad810033c51776ce2807a7e1aaf77b0

  • SSDEEP

    3072:Vq6EgY6iYrUjp3o8PwP9qyW9CgTAwtAVKtpcZqf7D349eqiOLibBOv:cqY6ivHwP3YCgTAsAYpcZqf7DIHL

Score
10/10
14082024redline

Malware Config

Extracted

Family

redline

Botnet

14082024

C2

185.215.113.67:21405

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3804-297-0x0000000000220000-0x0000000000272000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections