General

  • Target

    1688-58-0x0000000000400000-0x0000000000432000-memory.dmp

  • Size

    200KB

  • MD5

    ddd6a2bab3e889222bf24af8a0745bbf

  • SHA1

    ed39072c50be4bcec1d23ed7c9901c886a8cd3d4

  • SHA256

    1bd6513859155d3d72b01e51572f54168f147b6e5a8eb73e08bfad8f987f6637

  • SHA512

    4c7e4898cb195161e3b67c51db314705c0b3e5bdd3d462b9a9f6ae9d97d7b8151ed4d431939783d327d8ce28195338e8231781a16b6237cc37352aaa14144d10

  • SSDEEP

    1536:hvZi55zWagDfjlo919ECpTJTcF0pMSD2dxv6UihSJbu3zyZYFp0wuei+hnYcg:hxqZWFFa7E6T8nSECU3emSFph3

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

27-02

C2

45.150.173.61:45227

Attributes
  • auth_value

    0bb31cb7db78658c400285722924976e

Signatures

Files

  • 1688-58-0x0000000000400000-0x0000000000432000-memory.dmp
    .exe windows x86


    Headers

    Sections