General
- Target 1992-61-0x00000000000C0000-0x00000000000E8000-memory.dmp
- Size 160KB
- Sample220908-pfh7pseef2
- SHA256 7b0a66645c56c1622bed57a769bfdec82b8cc9bf4aea9e02ab8381b352ac317d
- MD5 7cf758ef3c780767420ea79c88f9201d
- SHA1 1eba95d5e2d1cd48da52c56da654ffcacdb2e66d
- SHA512 ffb9b208aa34167179dbc21138c33d44c55d87d15847dec87907fc7cb15ae1376ff141173c5eba6eb6286c93d8e3767631223c6cf761ebe86d41204461915e8b
- SSDEEP 3072:eYO/ZMTFgfCR2RAYQDOOVx3WrsVvaDF1GRPShpSS:eYMZMBgf2Yt4x3WFGpSh
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
1992-61-0x00000000000C0000-0x00000000000E8000-memory.exe
Resource
win7-20220812-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
1992-61-0x00000000000C0000-0x00000000000E8000-memory.exe
Resource
win10v2004-20220901-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
0809_0x00
C2
-
ns3.livelogs.xyz:81
Attributes
-
auth_value
4732d4c9e02e87fffadfade3615428cf
Targets
-
- Target 1992-61-0x00000000000C0000-0x00000000000E8000-memory.dmp
- Size 160KB
- SHA256 7b0a66645c56c1622bed57a769bfdec82b8cc9bf4aea9e02ab8381b352ac317d
- MD5 7cf758ef3c780767420ea79c88f9201d
- SHA1 1eba95d5e2d1cd48da52c56da654ffcacdb2e66d
- SHA512 ffb9b208aa34167179dbc21138c33d44c55d87d15847dec87907fc7cb15ae1376ff141173c5eba6eb6286c93d8e3767631223c6cf761ebe86d41204461915e8b
- SSDEEP 3072:eYO/ZMTFgfCR2RAYQDOOVx3WrsVvaDF1GRPShpSS:eYMZMBgf2Yt4x3WFGpSh
- MD5 SHA1 SHA512 SSDEEP
Score1/10