Overview

overview

10

Static

static

10

988-59-0x0...ry.exe

windows7-x64

988-59-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    988-59-0x0000000000400000-0x0000000000422000-memory.dmp

  • Size

    136KB

  • MD5

    a248bda7d64674f58853fe10e586b408

  • SHA1

    6459b07bc2c9889c2f016326606ce8e48ed2309e

  • SHA256

    c370bafd55749b4ad838c87f8478a206bf1a8edefb16ced2f1e02aba9420e6b9

  • SHA512

    55441dd0cbb34d5bb50f57218fa65af286d12e801ad1ebe292970948d42a6e23abf2851623dedd76dcc9552c1eb214d72ba32b97be8bfe0546350638f46abb4f

  • SSDEEP

    1536:Ke101b1VS18b/BKtmAO7uhYYrjbuRGd6nhuyq/ddpVUdbknEvG6qTaoig:XKPEmR7uhYYDv6nYyOddpAkEa

Score
10/10
newmixredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

newmix

C2

190.2.145.79:80

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat

Files

  • 988-59-0x0000000000400000-0x0000000000422000-memory.dmp
    .exe windows x86


    Headers

    Sections