General

  • Target

    3124-171-0x0000000000370000-0x00000000003A6000-memory.dmp

  • Size

    216KB

  • MD5

    1b8c7e539624c74cf93607e1e1841578

  • SHA1

    9b1af83f8710e2f6c62d53f481202527a646c8c1

  • SHA256

    5bf759f3f7e1a63d9fbaab6ae9448b16b48596f75b29a93f2d302132e024fedc

  • SHA512

    9c926f14d0903c6d519aded5c47e70aece7cd8717c169be1e08a8cb1f0708af9a2742cc7d0914c3adefd251584722cd1337a8da8cfff97ec5496ec4f007a488d

  • SSDEEP

    1536:2YRfKNZHRersizuk1KYzO8qOe91dbXEergyhN5pzurytkadOUw1y/pbYY3Gy:ZsHFCKYzdqtX0YVVBkkrhpPGy

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

installs1

C2

89.23.96.2:7253

Attributes
  • auth_value

    fb538922d8f77f00fb6c39f8066af176

Signatures

Files

  • 3124-171-0x0000000000370000-0x00000000003A6000-memory.dmp
    .exe windows x86


    Headers

    Sections