Overview

overview

10

Static

static

10

2372-44-0x...ry.exe

windows7-x64

2372-44-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2372-44-0x0000000000400000-0x0000000000452000-memory.dmp

  • Size

    328KB

  • MD5

    5662b2f9bdc2912c0b62797461f82eb3

  • SHA1

    c36861153e701fa3f7f7cc6538adfce79c27887c

  • SHA256

    1d4189ca65889e703c722a6819a44a7e1320ed5f61c4b51022494624d8fa0c02

  • SHA512

    b69e254397a1fbad115fabc38759dd793ac720efb6d519fd2fee086ce08fa4ae1685ee08bfda566431199e68d46b9c4424a58e5e3c086e6d90fc9cad67aa8c05

  • SSDEEP

    3072:5q6EgY6i1rUjphYowPel9o4TWLZTTAotA/iBMcZqf7D34leqiOLibBOZ:IqY6igwPWxKZTTA0AeMcZqf7DIvL

Score
10/10
livetrafficredline

Malware Config

Extracted

Family

redline

Botnet

LiveTraffic

C2

95.179.250.45:26212

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2372-44-0x0000000000400000-0x0000000000452000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections