General

  • Target

    1232-1-0x0000000000600000-0x000000000061E000-memory.dmp

  • Size

    120KB

  • MD5

    19be5130273481fdba6f896d7a5de51c

  • SHA1

    3e45b0bf43a83fb2fafbab2472597614d947becc

  • SHA256

    b65a8964c3add3a618de5f5679d5a8d402e488df6ed181cf4539336911d0a6d9

  • SHA512

    612385d2320e6511fb612668544f5b715006153c2fba7e8edacd531ba5b8742d5b1db7bc17d02dd70084ca5b672d1b211ef67df4d637d0f68fec12a91b3cb78f

  • SSDEEP

    1536:Oqsk1tqzClbG6jejoigIr43Ywzi0Zb78ivombfexv0ujXyyed2H3tmulgS6pE:swtAyYr+zi0ZbYe1g0ujyzdPE

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

test

C2

89.23.98.105:4483

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1232-1-0x0000000000600000-0x000000000061E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections