General
-
Target
1436-41-0x0000000000400000-0x000000000041E000-memory.dmp
-
Size
120KB
-
MD5
9e119e16aa49ca7ad374bf775fcdd08d
-
SHA1
65ca295a182514ec12de639ba6e345d57df80d82
-
SHA256
e7c22c62eb50d59e651693e5b9a3137626270c789903aad36826cf8ce17a4b4a
-
SHA512
ef716d31324cac489f0b6c053bf17468a59473a5638e5912882d15f82428672aa69cebb984adc0a9b10801095625f131a0f5e5b3f69d68afa6c65c650d8f41a2
-
SSDEEP
1536:9qsINqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2y3teulgS6p:rAMOY3+zi0ZbYe1g0ujyzdk
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
cheat
C2
45.137.22.116:55615
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1436-41-0x0000000000400000-0x000000000041E000-memory.dmp
Headers
Sections