General

  • Target

    2044-59-0x0000000000070000-0x000000000008C000-memory.dmp

  • Size

    112KB

  • MD5

    c5fe8678d686594f072752261022a4ea

  • SHA1

    08dae5795d5de4a42a364c4388654b7f624a23ed

  • SHA256

    4a3cd0003e125e6b00529caf54397af6235b3c048e1144a989fecd282be62d04

  • SHA512

    47c9e12317da1ede68c0db423bd033beee76f467a25a8e1ce7da7d52ae42d8b4202370cff6596a99f0ef3d2adb319ee737ea121edb0614aef9817bcef9bad339

  • SSDEEP

    1536:uPqUPY5gyWjddJg3ZnubDNtieWDN+DNwNDaDNKiuRjyCYDN1jviDNPaQJ72oPMlI:J/u+eqOaJiJlyb3yCWLIp

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

Lyla.11.09

C2

185.215.113.216:21921

Attributes
  • auth_value

    a1e5192e588aa983d678ceb4d6e0d8b5

Signatures

Files

  • 2044-59-0x0000000000070000-0x000000000008C000-memory.dmp
    .exe windows x86


    Headers

    Sections