General

  • Target

    680-131-0x0000000000100000-0x0000000000132000-memory.dmp

  • Size

    200KB

  • MD5

    68fd8071556506c80cb33d77b82a5c19

  • SHA1

    c49158e3dbf89d445d7f23400e086c1d419d3ce9

  • SHA256

    418e0c596f6c640ebe43c426363c49e8e63368631c6b2d6df97b7c513af11e18

  • SHA512

    1d087ac21749e2e4417753ec0f0e8ae21ada6a363bade29bccfe1d358eac8c22cf18750e200007b0c1eaca1e35d3c62f7daa158bc40980ac49271e3407c3e576

  • SSDEEP

    3072:4xqZWVNaDUSkPMKandeV59lhhvbxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuU:mqZ8MKwClh9

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

ck

C2

176.113.115.17:4132

Attributes
  • auth_value

    7ac4424f89748eae7f5c6a4756d89c28

Signatures

Files

  • 680-131-0x0000000000100000-0x0000000000132000-memory.dmp
    .exe windows x86


    Headers

    Sections