General

  • Target

    2548-21-0x0000000000400000-0x000000000041E000-memory.dmp

  • Size

    120KB

  • MD5

    8106e606cc30a4172dba68541f4c96d3

  • SHA1

    c07356e65eb1083551d99f664b649d785981b748

  • SHA256

    54546abad45df80a54b4f713c404b07388ae819623a68a12c2121e3d73d547bb

  • SHA512

    78ad3289e0f5af9555e90d5107de22223ae18208f169bf1dc3bbc23126a7f08b78fe7b9146de55ae930e8bd98546c4c89c9e5adae301c8fd412d19fb1ba250ae

  • SSDEEP

    1536:9qsINqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2z3teulgS6p:rAMOY3+zi0ZbYe1g0ujyzdP

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

154.26.157.48:55615

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2548-21-0x0000000000400000-0x000000000041E000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections