General

  • Target

    5200-277-0x0000000000400000-0x0000000000432000-memory.dmp

  • Size

    200KB

  • MD5

    716588d99ad0f16a047adff6c6dee073

  • SHA1

    c2eee5d92706b8054f1d1b6f525d2c7ec621b310

  • SHA256

    d5cba21ecb0782cb8f8cdbd9be3205476a5c8d48cce801260208283657e7e8df

  • SHA512

    b00917eb682ff0e1ed4c0109703e51a65615e535c4656db15a441fb31bc0e22aa7e010e47d65dfd0a5a5bc23d4ffd875e2702dd8c2f839ef2657b7f922860c6b

  • SSDEEP

    3072:hxqZWBJaHEDgXecdU2eXpFDhxTxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuwu:TqZVecGtDh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

logss

C2

194.180.48.225:80

Attributes
  • auth_value

    b71d7809b599c8f72a0833349911b233

Signatures

Files

  • 5200-277-0x0000000000400000-0x0000000000432000-memory.dmp
    .exe windows x86


    Headers

    Sections