General
-
Target
1868-70-0x0000000000400000-0x000000000041E000-memory.dmp
-
Size
120KB
-
MD5
513e546c92d7526fe50cfa7d122ec1b8
-
SHA1
e988e2113030488bb4d011a3230dd14d297f7212
-
SHA256
150a4e4906de011b855e397425ba2a20204ecfadfc9025ebaac4b176d2209466
-
SHA512
a821636344ce624d8b9f46e2a36d5759f0d0dd2e65c7b9533e1ec582cb3a25c57863c1074f846b130262f3ba5825e67d395626b71fb3a6fd09589ef9769978da
-
SSDEEP
1536:9qs+XqrzWBlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2M3tmulgS6p:r0gzWHY3+zi0ZbYe1g0ujyzdO
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
cheat
C2
65.108.24.105:2017
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1868-70-0x0000000000400000-0x000000000041E000-memory.dmp
Headers
Sections