redline | 2740-32-0x0000000000400000-0x000000000041E000-memory[.]dmp

General

Target

2740-32-0x0000000000400000-0x000000000041E000-memory.dmp
Size

120KB
MD5

88e79d740a0445d72a18459635c73cb9
SHA1

25db8e372f9ae247010ceedfbf6541557477209d
SHA256

4d3b1886fb6f3e68fea2c9c86995153793debd2414547a4d515bdb87c5929686
SHA512

f82aea7b290014bc849deefe2aa5962478b8a09aa0349dd15f1b21e4cf97449d9ba5c8cacbfba7ba1037186812bd8671a4276a3d3fe74938e03e77907fa0f729
SSDEEP

1536:5qsCbqDylbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2x3tmulgS6p:XEwiYj+zi0ZbYe1g0ujyzdN

Score

10^/10

Family

redline

Botnet

cheat

C2

185.222.58.253:55615

RedLine payload 1 IoCs

Processes:

resource yara_rule

sample family_redline
Redline family
redline
SectopRAT payload 1 IoCs

Processes:

resource yara_rule

sample family_sectoprat
Sectoprat family
sectoprat

resource	yara_rule
sample	family_redline

resource	yara_rule
sample	family_sectoprat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2740-32-0x0000000000400000-0x000000000041E000-memory.dmp