General

  • Target

    972-137-0x0000000000400000-0x0000000000432000-memory.dmp

  • Size

    200KB

  • MD5

    dc7a4b9d54480bdc22769d6896284f43

  • SHA1

    19d20f4bae280a47f295cb29c0b6a914e786c252

  • SHA256

    80ebc88180780d0d4f4d6cdd1c42774c60637b59617f3a8278d111e442443c49

  • SHA512

    aa83bca8ce2b56f20f08dbf20769576610e51a90e040c39848bf530b98cb4b98ace7e0bc6d7ef6ffd37fc5a69d3232ff013c46f4f82d48bb9df8337324b7d7b1

  • SSDEEP

    3072:XxqZWjnacI0iLl58Zlre95F2h5HxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuO:hqZ7P8+2h

Malware Config

Extracted

Family

redline

Botnet

@rozebalpedistall

C2

185.244.182.218:2027

Attributes
  • auth_value

    be1d24f4fbd185a6c652470a30ff75b2

Signatures

Files

  • 972-137-0x0000000000400000-0x0000000000432000-memory.dmp
    .exe windows x86


    Headers

    Sections