General

  • Target

    1048-57-0x0000000000400000-0x0000000000446000-memory.dmp

  • Size

    280KB

  • MD5

    58698a9a05d412372757aec6d62b7975

  • SHA1

    14b39494ab8afe7c138188d09ffb4c046b670225

  • SHA256

    281e79b42e43643f0545cd9728d6792492b670c7ac0948673bbb1b628a27db90

  • SHA512

    5a91d1c0fbdb01417ee4e24b88152b8953f47d0fef02682a50ea3fca562858f276586101bc9357072bf7eeac3e75b33cf053ba712ca5e0c19dcfb210d62c2c46

  • SSDEEP

    3072:7xqZWaxafU74XP6AgdWU7eN5FSh85FLnLcDB+zqqipDiNrUa2QRxWDiJ+vf9W:NqZyCzLEShGFfsJqiUxcU

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

Eu

C2

176.113.115.220:80

Attributes
  • auth_value

    6a09db0be7c6fa843d208add4fdd4893

Signatures

Files

  • 1048-57-0x0000000000400000-0x0000000000446000-memory.dmp
    .exe windows x86


    Headers

    Sections