General

  • Target

    684-58-0x0000000000070000-0x000000000008C000-memory.dmp

  • Size

    112KB

  • MD5

    ffd37d94cc5fb9abf1eec4f45a37f935

  • SHA1

    49caa58f40fb92478801564979e223464cedcd3a

  • SHA256

    1565a26ed0074e9d6cad99be0813291fa1d4619192232f887643b8e66a07bbd6

  • SHA512

    6e10542d0405b1e8f5359402f7c0c8e49cd00f68ba567aa57d0282def86d9c5d8769ddf351d76e5efcc0b8a84bf014e5f992da585a047c8a1eb41424648e41ea

  • SSDEEP

    1536:uPqUPY5gyWjddJg3ZnubDNtieWDN+DNwNDaDNKiuRjyCYDN1jviDNPaQJ72oPMlC:J/u+eqOaJiJlyb3yCWLI

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

Lyla.11.09

C2

185.215.113.216:21921

Attributes
  • auth_value

    a1e5192e588aa983d678ceb4d6e0d8b5

Signatures

Files

  • 684-58-0x0000000000070000-0x000000000008C000-memory.dmp
    .exe windows x86


    Headers

    Sections