General

  • Target

    1552-214-0x0000000001370000-0x00000000013A2000-memory.dmp

  • Size

    200KB

  • MD5

    2bc30fa6fd4296284e66ed235a84fc85

  • SHA1

    44028fbbdf5d15b0bf9994af0c0fdbc465e78ffb

  • SHA256

    01b0fdc0b24d6397046267148040a2d347d31db82bdbd77b0c5b091c9cb05ca4

  • SHA512

    ee876b5f04be8229878e8c18af6c93b5e5919ae35ebbe383203d148c13f5c7858fdeee1fd55bfe3666288231f8c7018c229a0cf4ba69ceb0775c8c29c3b1bd57

  • SSDEEP

    3072:DxqZWPTa9ApGvgiOTcdkeZ59xhm/xNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOF:VqZvgiO6Jxh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

dubka

C2

193.233.20.13:4136

Attributes
  • auth_value

    e5a9421183a033f283b2f23139b471f0

Signatures

Files

  • 1552-214-0x0000000001370000-0x00000000013A2000-memory.dmp
    .exe windows x86


    Headers

    Sections