General

  • Target

    1556-224-0x0000000001340000-0x0000000001372000-memory.dmp

  • Size

    200KB

  • MD5

    d35fe33320aac5ccc5e3c77718eab743

  • SHA1

    cf853a6edd3f2bef312ccac83724db025dbaad4f

  • SHA256

    b3494ffaa62544fd16ae139a4eb2cd6cc899e0aa3f7ddca4fdde1edab838d3cf

  • SHA512

    08779d56f2153bb15e0cb226d7e49dad6148220ac69f9978f8eafced0c8a4c9789546aa31d77e945a6d2666a1a6d7470bc42b1049e1b148e0c558c7551f01e28

  • SSDEEP

    3072:PxqZWPTa9ApGvCbyXcLeM5EohiUxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuK:5qZvCbyscoh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

dunm

C2

193.233.20.12:4132

Attributes
  • auth_value

    352959e3707029296ec94306d74e2334

Signatures

Files

  • 1556-224-0x0000000001340000-0x0000000001372000-memory.dmp
    .exe windows x86


    Headers

    Sections