General

  • Target

    480-213-0x0000000000860000-0x0000000000892000-memory.dmp

  • Size

    200KB

  • MD5

    ba1ae933b50ed1f844df45cd2e79b6ed

  • SHA1

    4621f9033502af9a8b13475b9e9624157788b755

  • SHA256

    1e4d1647daa50f2d7732599ab8ea61505273d70ce05d00b9bae2a6d71f6c98e5

  • SHA512

    aa0c23c71f6abc4d92b1bbd2935bf0614657c75e6b49d2ff92fa4892ab7918e3bb9ebd999f66641259997eb7aef715ccbc969216daacc841a02b2b19b71dfd4a

  • SSDEEP

    3072:9xqZWPTa9ApGvgiOTcdkeZ59xhmFxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOF:HqZvgiO6Jxh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

dubka

C2

193.233.20.13:4136

Attributes
  • auth_value

    e5a9421183a033f283b2f23139b471f0

Signatures

Files

  • 480-213-0x0000000000860000-0x0000000000892000-memory.dmp
    .exe windows x86


    Headers

    Sections