General

  • Target

    1956-57-0x00000000000C0000-0x00000000000F2000-memory.dmp

  • Size

    200KB

  • MD5

    a3607cca789e6ee48e4823ccaeef1d49

  • SHA1

    2933778afc12e0d1a5f0935608b5d12cac03797c

  • SHA256

    e6f98355a8f1ea6eb1bf697656745e13fa47d26c27d0a4d8542058b0befcea23

  • SHA512

    86f0bf62660a155083fe54f33a937247450245522586190f87ced55f89ac60d9ce8c43129f62a9f89acf551680cf262cd147a435847f48b257124e2d91931f0c

  • SSDEEP

    3072:1xqZWD3aWNIUK3lRaeiBQez5FQhWTxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jM:/qZrloNTQh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

11

C2

79.137.202.18:45218

Attributes
  • auth_value

    107e09eee63158d2488feb03dac75204

Signatures

Files

  • 1956-57-0x00000000000C0000-0x00000000000F2000-memory.dmp
    .exe windows x86


    Headers

    Sections