redline | 2140-71-0x0000000000400000-0x000000000041E000-memory[.]dmp

General

Target

2140-71-0x0000000000400000-0x000000000041E000-memory.dmp
Size

120KB
MD5

4f13d15c60b83a1a3d716b3ebcb45d4b
SHA1

dbc4382b095f3e42f32c5f1832cca4fc13dca855
SHA256

a41d6942625200bdd450f19b43a1d617656586afb0897ddf03fac6324447cd6f
SHA512

c3a64bf1eae89a590c6378aec282c2ed138bee3216fd892914382b8adf20fdc29e6f7f4a41bb1995a8592105fce23c69eb12882f4ca091c4af7a9ebcb881dfd0
SSDEEP

1536:xqs+jlqzWlbG6jejoigIr43Ywzi0Zb78ivombfexv0ujXyyed2yteulgS6pk:f2UeYr+zi0ZbYe1g0ujyzdKk

Score

10^/10

Family

redline

Botnet

Henz

C2

54.37.93.250:45867

RedLine payload 1 IoCs

Processes:

resource yara_rule

sample family_redline
Redline family
redline
SectopRAT payload 1 IoCs

Processes:

resource yara_rule

sample family_sectoprat
Sectoprat family
sectoprat

resource	yara_rule
sample	family_redline

resource	yara_rule
sample	family_sectoprat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2140-71-0x0000000000400000-0x000000000041E000-memory.dmp