General
-
Target
2548-19-0x0000000000400000-0x000000000041E000-memory.dmp
-
Size
120KB
-
MD5
a3efdf2ad2b432f84d2ec434c7e0fbae
-
SHA1
456227464e23bb537f9c2a399a3d859e783495d1
-
SHA256
206fea1da33ff159ddb874be39c10fe3497b4c7666db3f5cb4344c06bd427b3a
-
SHA512
ee7e45417b9502d5afaa53fc79744669530579e295ed10939d0d5d6e6beffa3a6cb107b920d65dace22ac6c1766da7f49d304b6dd760cc8c6582a787376859ee
-
SSDEEP
1536:9qsINqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2w3teulgS6p:rAMOY3+zi0ZbYe1g0ujyzde
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
cheat
C2
45.137.22.185:55615
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2548-19-0x0000000000400000-0x000000000041E000-memory.dmp
Headers
Sections