General
-
Target
2952-109-0x0000000000D00000-0x00000000012D4000-memory.dmp
-
Size
5.8MB
-
MD5
5b5cf187e484c73d17083febf23aae1e
-
SHA1
42abed3b5394cb1e48c3f4d3008c5edfcf10c3f1
-
SHA256
4aa0c9de40186ad7cb2086b05dd2003241e447bc6765148229dcf2cd979041b8
-
SHA512
1a703dc22cf2e4cf4ba07cfc597546eac3a495f39fa02905bf83f734057c97dd97fe8b22bc14683bea6fb9ce781ddc82e147f9552cbff8ea7efc0ccec0804e41
-
SSDEEP
1536:JqsCbqDylbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2m3tmulgS6psl:nEwiYj+zi0ZbYe1g0ujyzdUs
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
cheat
C2
142.11.240.191:35361
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2952-109-0x0000000000D00000-0x00000000012D4000-memory.dmp
Headers
Sections