General

  • Target

    3716-137-0x0000000000400000-0x0000000000432000-memory.dmp

  • Size

    200KB

  • MD5

    ebb42d9812e054b3d4fa90e061b082bc

  • SHA1

    e7ecc6b817a1d6d3e5bbc36431902c56e4f20429

  • SHA256

    83957fb399880a8d1d2ea8467ddbb1f241e49cb9dc9a89f83f96a27e5c91484a

  • SHA512

    e36e52022c0375bee9a3718bf417758eae9ddcc57b04e766e1c76ad6bf949266a4af1daf8c647929dc1192b803d09beb8ac61e5680e03040a9cb394180189d19

  • SSDEEP

    3072:2xqZWvZa3E6zV3iIVs3eB5FVh2KxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuD:cqZ73iIOcVh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

build_main

C2

80.85.156.168:20189

Attributes
  • auth_value

    5e5c9cacc6d168f8ade7fb6419edb114

Signatures

Files

  • 3716-137-0x0000000000400000-0x0000000000432000-memory.dmp
    .exe windows x86


    Headers

    Sections