General

  • Target

    1668-55-0x0000000000950000-0x0000000000982000-memory.dmp

  • Size

    200KB

  • MD5

    8eb4120a7bc500e11ecaeec1df2c088e

  • SHA1

    55196e69e35a09a6827f0e6ea1dd61536ab20953

  • SHA256

    2558a9531f6dd074d37446ccd3df47219e641b6d53ef04a4ac7e1f0fd97fe4b6

  • SHA512

    e392436bf8d612a9dddb95b7cfc246c870c36d46c6a6d20f05c0a1daf818a9e1e116cea7375c3e5bad26a16b06709211ccde253b3cbd6cdc3616101497fc283a

  • SSDEEP

    3072:rqaaU11GZLmM7DsRttR2XYrrifNfAvX0CON98FN0UFMjymJ2jymBHrH8Ecaot9b8:wZ+0aLKSh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

Media

C2

199.115.193.171:48258

Attributes
  • auth_value

    82789a7b2857c80849a911b56defecb0

Signatures

Files

  • 1668-55-0x0000000000950000-0x0000000000982000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections