redline | 2720-7-0x00000000000C0000-0x00000000000DE000-memory[.]dmp

General

Target

2720-7-0x00000000000C0000-0x00000000000DE000-memory.dmp
Size

120KB
MD5

eb1e8304744371d19c8198d75e7c94bc
SHA1

903aa28cbd6403db9ea6b27590765715b6cedde9
SHA256

8d26b4a8860b3a8e12d03d79bd3fb50abc1b867265c0a1a2e2ad4f1a0d24e379
SHA512

69a90d989f5b066b5c7af02bb4df4ca33093d5cc97e854a9fb310c2f6bf306b61a19410fc9e86a1372da3b31cb8c51bc98baedc1d29d250aed448094d5f4d497
SSDEEP

1536:Jqs+NqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2RteulgS6pc:nqMOY3+zi0ZbYe1g0ujyzd1c

Score

10^/10

Family

redline

Botnet

Exodus

C2

94.156.66.169:1334

RedLine payload 1 IoCs

Processes:

resource yara_rule

sample family_redline
Redline family
redline
SectopRAT payload 1 IoCs

Processes:

resource yara_rule

sample family_sectoprat
Sectoprat family
sectoprat

resource	yara_rule
sample	family_redline

resource	yara_rule
sample	family_sectoprat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2720-7-0x00000000000C0000-0x00000000000DE000-memory.dmp