General

  • Target

    1188-56-0x0000000000080000-0x00000000000B8000-memory.dmp

  • Size

    224KB

  • MD5

    59ada7aa0d0943cc5536db93218b995d

  • SHA1

    d8ee1acfa02d475d5cd4ab52f08d5f4a0b36fd6a

  • SHA256

    839c4280f35e866e81ca3691600c827076a7ab343049802b37f746a06f1e38a8

  • SHA512

    c37705e06095192c88fc3c2314cab1a7972f18d9c902064dfef1f8aa9f12e4f8476db4053dfdc6a77a348e75d2a19eb87850f0e5a2b8c46e29c1986589a5d8a9

  • SSDEEP

    3072:aGB+EMxJMQPNsqxVXXWx3eNio4eEz/nkrzpiuf:aGB+lMoVGnOz

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

4

C2

176.124.201.56:25784

Attributes
  • auth_value

    1f101d9c1105a19254187500b2403d48

Signatures

Files

  • 1188-56-0x0000000000080000-0x00000000000B8000-memory.dmp
    .exe windows x86


    Headers

    Sections