redline | 2840-34-0x0000000000400000-0x000000000041E000-memory[.]dmp

General

Target

2840-34-0x0000000000400000-0x000000000041E000-memory.dmp
Size

120KB
MD5

ccc143f279c8902fe954ad120123ff2a
SHA1

e8ec68e354d9a1516de5ece803fca8e9fe322877
SHA256

a736758100ae69a924e80024c8a879612b7ee38e78236c475e899c17e639796f
SHA512

13faf27f35d119c6a804937e2cd296b0026122265d0e232cc48b7e9e026795daeb1f8435dd23b3ae8f090ba74a6b1b564dd099a197cb6d4ccd8b2020cae681e0
SSDEEP

1536:9qsINqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed203teulgS6p:rAMOY3+zi0ZbYe1g0ujyzdq

Score

10^/10

Family

redline

Botnet

cheat

C2

185.222.58.87:55615

RedLine payload 1 IoCs

Processes:

resource yara_rule

sample family_redline
Redline family
redline
SectopRAT payload 1 IoCs

Processes:

resource yara_rule

sample family_sectoprat
Sectoprat family
sectoprat

resource	yara_rule
sample	family_redline

resource	yara_rule
sample	family_sectoprat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2840-34-0x0000000000400000-0x000000000041E000-memory.dmp