General

  • Target

    1244-1184-0x0000000000400000-0x0000000000432000-memory.dmp

  • Size

    200KB

  • Sample

    230324-s35wrsfc97

  • MD5

    31b94b1a780a08caf692c141e832eaf9

  • SHA1

    d9de2b387241092e6c03a78fef2bff9d03e1d3c8

  • SHA256

    829fa1be6695e39e6c01c1db5d6dc9bca9f77c781a7e55e6eed16cb26280809c

  • SHA512

    ae15032b060ddca27d24a12c5c348affc652db7c8d7b513d7792ea349e44e5fe9ddcd862014a44ac5b28c23d407e066b007cc3ae3acd3e0abb814e4fde151887

  • SSDEEP

    3072:cxqZWzvagwoMR3Q5DeV59kh0fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuw+P:yqZVOIkh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

Anh123

C2

199.115.193.116:11300

Attributes
  • auth_value

    db990971ec3911c24ea05eeccc2e1f60

Targets

    • Target

      1244-1184-0x0000000000400000-0x0000000000432000-memory.dmp

    • Size

      200KB

    • MD5

      31b94b1a780a08caf692c141e832eaf9

    • SHA1

      d9de2b387241092e6c03a78fef2bff9d03e1d3c8

    • SHA256

      829fa1be6695e39e6c01c1db5d6dc9bca9f77c781a7e55e6eed16cb26280809c

    • SHA512

      ae15032b060ddca27d24a12c5c348affc652db7c8d7b513d7792ea349e44e5fe9ddcd862014a44ac5b28c23d407e066b007cc3ae3acd3e0abb814e4fde151887

    • SSDEEP

      3072:cxqZWzvagwoMR3Q5DeV59kh0fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuw+P:yqZVOIkh

    Score
    1/10

MITRE ATT&CK Matrix

Tasks