General

  • Target

    680-56-0x0000000000400000-0x0000000000432000-memory.dmp

  • Size

    200KB

  • MD5

    222feb92ad7ae75699a9faa2e5f71d7e

  • SHA1

    a3c90190924712056ee7f5de9f5043a2ad0bb93d

  • SHA256

    17465a88554dd5cc31fd1245fb5dba7bc92535daed61d6749ed918fa4b06890e

  • SHA512

    565c8afeeb88ef7b3aa1dc5cf51c716b395b985906c38693fb615cb0bcf281f756ece1bb780d344d7a2e6064532f99751309d6a027a0dd544c5377608bed175d

  • SSDEEP

    3072:2xqZWN1a7AUEzhc2uW7SIeweBXF4h50xNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw3:cqZ2hjuVRT4h

Score
10/10

Malware Config

Extracted

Family

redline

C2

95.217.14.200:34072

Attributes
  • auth_value

    1bfac947c350008abe813772b735f0fc

Signatures

Files

  • 680-56-0x0000000000400000-0x0000000000432000-memory.dmp
    .exe windows x86


    Headers

    Sections