General
-
Target
2292-15-0x0000000000400000-0x000000000041E000-memory.dmp
-
Size
120KB
-
MD5
2aa3f676b0c7a0cb3393c49cf600267c
-
SHA1
5b84cc3750b1f0efded38abd4d020cf30e099848
-
SHA256
1d5942b85517ca3d7795f544ee2b5a6134aa153eac5cac85c0b29d0c49d1765b
-
SHA512
fd4a25548bd03d2540c20cb0e2cba6625dafe0a74cefa4ec5b8420a51533663245819a7f376bf4630080e23ef0baecdb3f3947414d973e8ce2d527b5c819867c
-
SSDEEP
1536:9qsINqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2H3teulgS6p:rAMOY3+zi0ZbYe1g0ujyzdb
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
cheat
C2
185.222.58.84:55615
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2292-15-0x0000000000400000-0x000000000041E000-memory.dmp
Headers
Sections