General
-
Target
3704-25-0x0000000000400000-0x000000000041E000-memory.dmp
-
Size
120KB
-
MD5
e76529f0a8f52aa3f2b172d3a5df0a00
-
SHA1
0badc8da29ab63625c1fc9eb8a7225db1d540790
-
SHA256
1c1a99b4809d7653ef1d31ba67a5698fc650dc433109aff3689cc2714050729c
-
SHA512
e5401e0fac462c5cd46e0be7748faa4dce81feaf1af0b81300a802ac02afb060d5df32e77f58e77e92ce3c945fe82e053b919bbf58260908d3bae556d9c04e04
-
SSDEEP
1536:9qsINqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2T3teulgS6pY:rAMOY3+zi0ZbYe1g0ujyzdfY
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
cheat
C2
45.137.22.186:55615
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3704-25-0x0000000000400000-0x000000000041E000-memory.dmp
Headers
Sections