General

  • Target

    1364-218-0x0000000000F20000-0x0000000000F52000-memory.dmp

  • Size

    200KB

  • MD5

    6abb37534734fa0a9192ac19a8dd7250

  • SHA1

    8b22fb29795dea07407cd925fefb83e164afd538

  • SHA256

    7ac3de5f504c790798bb3c812e9271f27b9833a3de2394ed1c6b543a1734ef27

  • SHA512

    468742a7e1ca656034099714e2fb4dfeb8bd568da61278361bf63382e25129fa518594179f47ef5dff1766a40a0d9a66f08ff3589eb7b2bba12b3e933be1e6b6

  • SSDEEP

    3072:DxqZWFFa7E6T8mAje3595hUJxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuw+ct:VqZc1q5h

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

cr10n

C2

176.113.115.17:4132

Attributes
  • auth_value

    6016c19179aa1044c369adb0ec1f363b

Signatures

Files

  • 1364-218-0x0000000000F20000-0x0000000000F52000-memory.dmp
    .exe windows x86


    Headers

    Sections