General

  • Target

    1128-56-0x0000000000400000-0x0000000000432000-memory.dmp

  • Size

    200KB

  • MD5

    75517adc6aeb2b43e13c595e480f054c

  • SHA1

    8ccb9696603bef313c20e3e74546fb55672e032e

  • SHA256

    5bd2a093f5375c8d850ad39b0b8b51812dd19325afff99dd0f158d696e0ce35f

  • SHA512

    8f2424671b888b65e80e8d6626f02c3697d79fc8ac7a2dce4b4786391d07897667e8762cc634582eeea88f4fdfb77895d44940bb2c090cd1e5da0e656d7fa877

  • SSDEEP

    3072:OxqZW19aaUOEv0F4IeJFhyeTd9LhfzxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0N:0qZF0F4ZJFnLh

Malware Config

Extracted

Family

redline

Botnet

@FuckYouStupidBich

C2

ofriaransim.shop:80

Attributes
  • auth_value

    00765c22a9178a4ffd65b930fc6276b7

Signatures

Files

  • 1128-56-0x0000000000400000-0x0000000000432000-memory.dmp
    .exe windows x86


    Headers

    Sections