General

  • Target

    2780-134-0x0000000000400000-0x0000000000448000-memory.dmp

  • Size

    288KB

  • MD5

    4733da998880799c713343606d19b0e4

  • SHA1

    972967cda5b3780f1d1c924df1530efd82094b2b

  • SHA256

    674758ccda0bb71e2eabd4f24b618fc78c2158dccc06c63827b53dc72305f508

  • SHA512

    eb1d2f875c804675a72c52642fd9eb8dca4c6a9d1ada5ae3b33fd5c44c6eb0af37e4ac04b9adaa1db031815b9d7386a90e954725d0183fcc06a48dd1e2934940

  • SSDEEP

    3072:oxqZWn7aNQYF8Hu1et5FbhSVMAeIbDj0+b8iUgea3c3iFujzZZICp/pW7:WqZuHuebhYeIbDj0+b8iAasS2DW

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

Medi

C2

167.235.156.206:6218

Attributes
  • auth_value

    d90bd61d39468ff59777325c1e07c552

Signatures

Files

  • 2780-134-0x0000000000400000-0x0000000000448000-memory.dmp
    .exe windows x86


    Headers

    Sections