General
-
Target
2360-172-0x0000000000400000-0x000000000041E000-memory.dmp
-
Size
120KB
-
MD5
f8d13887b474a1346c0d9afc0aac8348
-
SHA1
d1ddb9d02aa6891044cacb4be06e6a6ed22e778c
-
SHA256
9888d5a959f6eb261c8f3c10781f17b0fed83e98b090861573cccec1dc5c5194
-
SHA512
f1ed080551ec86e9f03260f506c6b1cbea63a0bcc28938305914ca4d35d7890f35c8e7aca1eecf12c7d3f8cf7e829b20360deb3a5573b14fee03a6f3b9d5f531
-
SSDEEP
1536:5qsCbqDylbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2JtmulgS6p:XEwiYj+zi0ZbYe1g0ujyzdB
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
trial
C2
173.44.141.116:38411
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2360-172-0x0000000000400000-0x000000000041E000-memory.dmp
Headers
Sections