General

  • Target

    1468-55-0x0000000000400000-0x0000000000432000-memory.dmp

  • Size

    200KB

  • MD5

    253eb4e774012547f00a7de439de62cc

  • SHA1

    f487ffaabf5bb57be300c11b1a53071fdf396ec4

  • SHA256

    784e04744611026b8362afa6b84754ed514ca70aa352249b144848ef534f685b

  • SHA512

    c1256355540fbad4ce7867652add9d61610d87416c5d0cfc37a82982ad32340e7824391e4f111f07fbc603c7f11111210b7960725c09e46bd84da5f41896b51e

  • SSDEEP

    3072:TxqZWFFa7E6T8VTImeAe3x9RhH7xNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOu/:lqZcVTIHXRh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

live1

C2

176.123.9.142:14845

Attributes
  • auth_value

    256c1710f8383c9b94b8fd402fe763e7

Signatures

Files

  • 1468-55-0x0000000000400000-0x0000000000432000-memory.dmp
    .exe windows x86


    Headers

    Sections