redline | 2728-10-0x0000000000400000-0x000000000041E000-memory[.]dmp

General

Target

2728-10-0x0000000000400000-0x000000000041E000-memory.dmp
Size

120KB
MD5

2157004b48392da4d11854fa325e8534
SHA1

46265f0711cbba540019385c271650d15d50efa6
SHA256

2a947fbcfb27ba3eab9cfa2cc3f3d450e18c9ad04d7a12690426b5258eb4d5fc
SHA512

f72de5e7749e6add9f75f4c14c8e20956f06b51923fdfd54ba6158be6db230a3cd322239cd9fd054b928db7963af83d63837e07f0b0a330753ee2a50a6c5d670
SSDEEP

1536:9qsINqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2B3teulgS6p:rAMOY3+zi0ZbYe1g0ujyzdp

Score

10^/10

Family

redline

Botnet

cheat

C2

45.137.22.173:55615

RedLine payload 1 IoCs

Processes:

resource yara_rule

sample family_redline
Redline family
redline
SectopRAT payload 1 IoCs

Processes:

resource yara_rule

sample family_sectoprat
Sectoprat family
sectoprat

resource	yara_rule
sample	family_redline

resource	yara_rule
sample	family_sectoprat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2728-10-0x0000000000400000-0x000000000041E000-memory.dmp