General
-
Target
1944-60-0x0000000000400000-0x000000000041E000-memory.dmp
-
Size
120KB
-
MD5
1bc52aba3175c2f31f4d822378431cbf
-
SHA1
038e677b8e52e2c2ea82017d7e24644fdbaa3a1b
-
SHA256
02e11c7091d1801f78846678f9be11fcd2797ff426d8f3a55dd8ac6d05f039dd
-
SHA512
5c6d08a239d866132a321ff8bbec56dde9ca7996472a9e124e72efdbe8d26764e5d77a936f4a57cf6323e5ea31b5443043403ae076967e3ab02ba21314a003e4
-
SSDEEP
1536:1qs+lqWWlbG6jejoigI/43Ywzi0Zb78ivombfexv0ujXyyed2EteulgS6p:zCReY/+zi0ZbYe1g0ujyzd8
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
D1
C2
66.85.27.233:54184
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1944-60-0x0000000000400000-0x000000000041E000-memory.dmp
Headers
Sections