General
-
Target
1988-55-0x0000000000090000-0x00000000000AE000-memory.dmp
-
Size
120KB
-
MD5
d27969c439869886ef488734efd4df0b
-
SHA1
d3bffe1cc6ff678b59c89c684ce1139e1e6f7fe7
-
SHA256
03cafe951cb91de9c07743953e031fb18fa3ea739b29d7aa4258a81468266c67
-
SHA512
d805b4440b03d2290da93c9ab9e49bbec96f23fb1e53d4a73152dff9f66ec4b69e744ccbdaf1caf6aa8b919a8cbafd1d9346ba29931bdb97391bcb5eabdb2b22
-
SSDEEP
1536:YqsC1tqzClbG6jejoigIr43Ywzi0Zb78ivombfexv0ujXyyed2htmulgS6pL:2OtAyYr+zi0ZbYe1g0ujyzd5L
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
4
C2
147.124.217.33:22650
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1988-55-0x0000000000090000-0x00000000000AE000-memory.dmp
Headers
Sections