General

  • Target

    1104-58-0x0000000000400000-0x0000000000420000-memory.dmp

  • Size

    128KB

  • MD5

    22ac0dc2bbd731e4be9e39794a2a8114

  • SHA1

    65f67d90d04f8ddac7645386e6b09d039f089de9

  • SHA256

    adf65756405c37347ebd9c66db36c08e00b2a89a70d9291e17820923bb5bba68

  • SHA512

    646aa1abb27a081f24360b381147f0c763a22893357affd027861778bf1855f3aee4a882b0ccaa1c99b21bd8876334d12c99224a1f798a46c689d5841952e9d4

  • SSDEEP

    1536:RdCB40rj3G62vE/oSRN1eZARgCvhvszbV7295qnwyLa:yKQj3PoSteZARgCvhv+Mb02

Malware Config

Extracted

Family

redline

Botnet

UniverSecity1005

C2

95.216.27.23:42121

Attributes
  • auth_value

    d14f2b9ad039778256cc141b5fdc9a1b

Signatures

Files

  • 1104-58-0x0000000000400000-0x0000000000420000-memory.dmp
    .exe windows x86


    Headers

    Sections