General

  • Target

    1440-56-0x0000000000080000-0x00000000000B2000-memory.dmp

  • Size

    200KB

  • MD5

    32d13bb79215afa50b23a9ab9f4cc252

  • SHA1

    c7ed3a26adb28d4a8cc5932a75d77e1577cd7d05

  • SHA256

    0c48a6c9577cb4f4467b198749aed7f6f708bd3218715299653209913dde0c5e

  • SHA512

    9a71a560c67834e6f4de5d0b25a7756c8d9839fce04c2aea0e2e8af554b670857ee7fddc92970eb42727f68c162554e91c40b9facb19aa7a772aa5de069699e1

  • SSDEEP

    1536:5vZi55zWaUDfjJo9NhECpwvEFQYJ4F69WenllV/6Jbu3zBgQFQ0wuei+ZnYcM:5xqZWJpaPEDv03yEWGljieFHFQh3

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

5350206221

C2

195.20.17.139:80

Attributes
  • auth_value

    cf75908d75b4508135a38c8679c86f6e

Signatures

Files

  • 1440-56-0x0000000000080000-0x00000000000B2000-memory.dmp
    .exe windows x86


    Headers

    Sections