General

  • Target

    1280-55-0x0000000000090000-0x00000000000C2000-memory.dmp

  • Size

    200KB

  • MD5

    c79e472cf26c37771fd31ae9270d8b94

  • SHA1

    ab286f1385cd7e9e2059c0143046a5eee25b4c8f

  • SHA256

    ae3e5b1b5a17680d44b14f819d0d122062c98e870e258006c3b0a117f2a74f04

  • SHA512

    4e0836c1b40deef8bd8ae8b8cadd826e9fdd2d67a45d2746f43d032a98acdbc3ef9ff422a564018fb569a338603c7108d8f2d990d75c97d824708f0bba2c90a8

  • SSDEEP

    3072:txqZWZpaPEDv0+bTXcZex5XKh3yxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOup:3qZl+bTs4Kh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

pushka5

C2

176.123.9.142:14845

Attributes
  • auth_value

    3972e378406c8f94cdefbe754d1b6a1d

Signatures

Files

  • 1280-55-0x0000000000090000-0x00000000000C2000-memory.dmp
    .exe windows x86


    Headers

    Sections