redline | 2824-26-0x0000000000400000-0x000000000041E000-memory[.]dmp

General

Target

2824-26-0x0000000000400000-0x000000000041E000-memory.dmp
Size

120KB
MD5

234e924eff822a5e2435001ac7a58747
SHA1

775e790ad503eb7d32ae5aa1186ad4cd2b57af57
SHA256

402308dac5a77b6d8e815c6567c8097a6d2c317076c48235d16428c4b7735ac9
SHA512

c5839d4703cec38d3d6975e183507e136eb3c4205a969146881559bd43cae48498f1aba77d6a6f1d1add57f6970f382e7697a19d42c41e6d7250b8c9bd50b3b5
SSDEEP

1536:5qsCbqDylbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2x3tmulgS6p8l:XEwiYj+zi0ZbYe1g0ujyzdN8

Score

10^/10

Family

redline

Botnet

cheat

C2

185.222.58.253:55615

RedLine payload 1 IoCs

Processes:

resource yara_rule

sample family_redline
Redline family
redline
SectopRAT payload 1 IoCs

Processes:

resource yara_rule

sample family_sectoprat
Sectoprat family
sectoprat

resource	yara_rule
sample	family_redline

resource	yara_rule
sample	family_sectoprat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2824-26-0x0000000000400000-0x000000000041E000-memory.dmp