General

  • Target

    2788-90-0x0000000000400000-0x000000000041E000-memory.dmp

  • Size

    120KB

  • MD5

    7b78a3ebefaba530202862fccb3d8432

  • SHA1

    0d6651bde6fe90042c92d9d6ff61cecf51865175

  • SHA256

    95815fd440787ae155beb2554df6fc4147955014cf36f9012dfe431c4858ac56

  • SHA512

    2595adf28da625165308278840b2d699707b1dfb25c7068e45c1ad7254f44b2d5f8d984c53e78ef0a0752ba5ff1b0c6722f87c9aba195b386ec473f91e4685ed

  • SSDEEP

    1536:xqsK1tqzClbG6jejoigIr43Ywzi0Zb78ivombfexv0ujXyyed2O3tmulgS6p:f2tAyYr+zi0ZbYe1g0ujyzdc

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

54.37.0.50:55615

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2788-90-0x0000000000400000-0x000000000041E000-memory.dmp
    .exe windows x86


    Headers

    Sections