General
-
Target
2880-12-0x0000000000400000-0x000000000041E000-memory.dmp
-
Size
120KB
-
MD5
3e15c48e3c48c8ecda238e7736214660
-
SHA1
1b606566bdd604f283896b019de484c15905c2fc
-
SHA256
2268574e284c4b133877cda12ffde10520e6c318357b15048c2f400a84f2fd5d
-
SHA512
63170506d5f7bcb0a0bde4335534dbf85fa645086af4a32e511afd46db7998bee0d4032f39ffa0580d1eaf99a1add462c459abb444c0846a88f0afb287dbb96d
-
SSDEEP
1536:BqsCWqm2lbG6jejoigI743Ywzi0Zb78ivombfexv0ujXyyed2MteulgS6p:v9B+Y7+zi0ZbYe1g0ujyzdk
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
Provision
C2
103.202.55.172:65012
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2880-12-0x0000000000400000-0x000000000041E000-memory.dmp
Headers
Sections