General

  • Target

    2316-87-0x0000000000400000-0x000000000041E000-memory.dmp

  • Size

    120KB

  • MD5

    cab9c6cca8d16da235c1e8fcb9ba7ca7

  • SHA1

    bc9b4c4af361f0d3f8d3ad81394dd1cb62fba9b1

  • SHA256

    9b2900fb5b3eeb589e7218ce31cc384b1cbc6a78dc27d05808dc57199f8db8d2

  • SHA512

    7947347bf9bf216063312a83b9dc7c48bb7f5b238b87a58a2d2cdb5cf141fc08bbf3edbf52b3044ccbacfe4e70a3cf9bc86ce30833d65e6f78f10335698a1ecc

  • SSDEEP

    1536:5qs8OqJGlbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2X3teulgS6p:XHuOYj+zi0ZbYe1g0ujyzdb

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

37.139..129.230:43136

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2316-87-0x0000000000400000-0x000000000041E000-memory.dmp
    .exe windows x86


    Headers

    Sections