General

  • Target

    1060-3684-0x0000000004490000-0x00000000044C6000-memory.dmp

  • Size

    216KB

  • MD5

    38ac51698d7f01698b61f41c6533bb72

  • SHA1

    97139dc5bf9f073e99ab6aaaacd3e3b00bf5f7d4

  • SHA256

    4bf986a404c4f38a690af3a2ae00b0d29e8e3508358ba98fa4457d4338cb0e35

  • SHA512

    19b07c6b697d5876fec01734b95ebf6565066df9adc616e8f4d9a73d87536416c62c04b6392267783f50ed15dc91172ab071d1ddb5e38ebd2e9dde663730ec4c

  • SSDEEP

    1536:uYF1qd1WeQreHKltSBWqauPectpbXEe3gyO9pzurQtsadOUw1y/pbYY3GN:n4WC+SBWedf0oV27skrhpPGN

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

installs

C2

89.23.96.2:7253

Attributes
  • auth_value

    8d4428f372143572364f044ea9649d7f

Signatures

Files

  • 1060-3684-0x0000000004490000-0x00000000044C6000-memory.dmp
    .exe windows x86


    Headers

    Sections