Overview

overview

10

Static

static

10

2008-58-0x...ry.exe

windows7-x64

2008-58-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2008-58-0x0000000000400000-0x000000000041E000-memory.dmp

  • Size

    120KB

  • MD5

    f08b1d5c6b0b0d2671395036e36cf0f1

  • SHA1

    19cba78355b9d30b8c7dba0ad9c98a437941e802

  • SHA256

    d88855ad50b060adbf14e688c80f47785af6e5f5ae47e715717ad0ae113ad1c6

  • SHA512

    8e889652bc52af49404e456d7b9d313337997ebcff6461d10f8fec255763ed27a08eb2c29109ee23a68b276e91d1ce63058bb86490f56d8b5257c6c2824b2bac

  • SSDEEP

    1536:9qsINqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2I3teulgS6p:rAMOY3+zi0ZbYe1g0ujyzdW

Score
10/10
cheatredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

45.141.215.90:21913

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat

Files

  • 2008-58-0x0000000000400000-0x000000000041E000-memory.dmp
    .exe windows x86


    Headers

    Sections