General

  • Target

    2800-140-0x0000000000400000-0x0000000000438000-memory.dmp

  • Size

    224KB

  • MD5

    ff086784b2a5cb081e03672fe0bcb793

  • SHA1

    16c61786b3a65eef6e4181c071d181618c296d88

  • SHA256

    c992ff1e61b6997ef03f5a1e2b6d96fd8bc9381b04821b59c602c36079b30cf6

  • SHA512

    ef3a3d4058d832e84b97a889a9894f6fd874f72ed6b38e0fd36a6e0e3a5a4119f1080bf2c084a4810746aa3aa53674d44c8f93072e938e23a9e89fd2173108c5

  • SSDEEP

    3072:eoB++MxlpQ+Ozsn8XF2//C/QIv+y412b7krzpium:eoB+Lpr3IrOz

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

installs

C2

77.73.134.57:20368

Attributes
  • auth_value

    018d84fd84774560e4827f12acc7d4af

Signatures

Files

  • 2800-140-0x0000000000400000-0x0000000000438000-memory.dmp
    .exe windows x86


    Headers

    Sections