General
-
Target
5240-230-0x0000000000400000-0x0000000000422000-memory.dmp
-
Size
136KB
-
MD5
bb119725315d2ef5bedc49e1d345ea52
-
SHA1
1bd9ca5a300290ba996cf58e7404f5a636863c03
-
SHA256
f9a32e641de470de995ed1050c118366b40aa4e4a52c31a1192f819599259292
-
SHA512
f137e52579eff92ea44b9ae376dea633c60d3a4e2a7410aa15474e5ed136dde6457ddf247b799b72262c3deecf6556a94ca400059f66527c75e033383fe17685
-
SSDEEP
1536:AMXdbTaNYCaJ2GGcJhm2q2JmHXbMuL6AgFvyTFsqiYPrzGEaZQ:AudKNYCT2Jhm2ErSAg1ypMuHBsQ
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
ANI
C2
194.104.136.5:46013
Attributes
-
auth_value
9491a1c5e11eb6097e68a4fa8627fda8
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
5240-230-0x0000000000400000-0x0000000000422000-memory.dmp
Headers
Sections