General
-
Target
1944-5-0x0000000000400000-0x000000000041E000-memory.dmp
-
Size
120KB
-
MD5
a70145bf3ed40585f36ded039e124581
-
SHA1
d6a448fe54e9e7ea751dfa8791764899b52fc379
-
SHA256
99265c4fb423bdde7f6f91534129cda0070b3a4e8fb10103d8d0adf692ed4d46
-
SHA512
2913a336de9614acac0db77ceb98d4bd7ef7267f5fa3cf97feabc4cd70d3d10c031cd8f0989ca4961825990eca87ecb3f5975009a0e876c76e1d4490cca00dac
-
SSDEEP
1536:9qsCNqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2oteulgS6pY:rOMOY3+zi0ZbYe1g0ujyzdIY
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
andi
C2
155.94.136.249:45715
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1944-5-0x0000000000400000-0x000000000041E000-memory.dmp
Headers
Sections