General

  • Target

    1744-55-0x0000000000400000-0x0000000000432000-memory.dmp

  • Size

    200KB

  • MD5

    a29c5bad9481f673c03c1e231763f087

  • SHA1

    d93ffd481ccb631c41b01c38a471328225e9b6d3

  • SHA256

    aef85d27b396d19eb854434c24b8e5380990ffb2765d88fa04afaa089d4009bb

  • SHA512

    6ddbfa82baed57b7e42f5602daffe4006f7eacf6ad1ecd9135900935d486b4c904856ae8fe096ebc7364c43d4f55bee1c050e325edaf8bd5828cbf63272da562

  • SSDEEP

    3072:DxqZW19aaUOEvpTeIcelD9ShyLxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuwV:VqZFpTlvSh

Malware Config

Extracted

Family

redline

Botnet

@rozebalpedistall

C2

185.244.182.218:18742

Attributes
  • auth_value

    be1d24f4fbd185a6c652470a30ff75b2

Signatures

Files

  • 1744-55-0x0000000000400000-0x0000000000432000-memory.dmp
    .exe windows x86


    Headers

    Sections