General

  • Target

    3540-252-0x0000000002540000-0x000000000256E000-memory.dmp

  • Size

    184KB

  • MD5

    1f0566c4d01d01c451cbcaaa59314eab

  • SHA1

    f4fa88f881cbf673bd85ee839e09eeec5751d189

  • SHA256

    098cc89a8a6d67398b50f9f5f776f7497d1b5cfeb53fa2917c71216241ecef60

  • SHA512

    8ca827fe17b74addbb2dfe394dc25c183640c4a39118cf59d8804a1d869ab7e5c52d5b068f3ec1f533b145b9ca6c0475b9e2000251649923c9d81a5f2c73c3ec

  • SSDEEP

    3072:9XFI/oeKBLOIlWLRm+GO/VyvfkshSFQ0WuF93O:dBLNWL0+GOAvfNZw

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

insmix

C2

jamesmillion2.xyz:9420

Attributes
  • auth_value

    f388a05524f756108c9e4b0f4c4bafb6

Signatures

Files

  • 3540-252-0x0000000002540000-0x000000000256E000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections