General

  • Target

    2376-406-0x00000000005A0000-0x00000000005D8000-memory.dmp

  • Size

    224KB

  • MD5

    ba1b79e0b9133bc0de0ddcfe566d0b31

  • SHA1

    027264c19acb37891ebe44d994dca8385a79ece7

  • SHA256

    69cc9be8a68de66767c7bc74090644452542c4650d76bdd321c10169eea32215

  • SHA512

    2e4b24172ad470e317dee7d9663619bf0eabca44dc771218a2895270e133190ba7c24a38aaa378fcdf174ae88ec26d508035abc78f5e7d57cebfa9d702cf2a0e

  • SSDEEP

    1536:FDvyrLJzVOqlVZRGWbpErWNgVtRZozECUmTGqVqbupHEo4fLyo+Vdr83wYkUBWZ:xuLJZfHuvRZjCUjqVeJRfn+VdrqBWZ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

1379752987

C2

167.235.158.92:39675

Attributes
  • auth_value

    94039ae8b5b0b9ec5346501cc0139461

Signatures

Files

  • 2376-406-0x00000000005A0000-0x00000000005D8000-memory.dmp
    .exe windows x86


    Headers

    Sections