General

  • Target

    2388-30-0x0000000000400000-0x000000000041E000-memory.dmp

  • Size

    120KB

  • MD5

    0e4c41a049d9dfcb91cef310492a0897

  • SHA1

    ceaffd0775edd9a3e89a39b5c6e8b74edf5efce6

  • SHA256

    2d610198a7b3f44ead0f95c62b66344703352cf95868234878c0143b624dbdb8

  • SHA512

    bb496441f835366ae9244d5c6f450cf7ce40db04306f2936a911c9baf8e7d8aca65e170bb6e4d584d2efe80a82f71473bc13cbf990725fc975b2b0c678c48f58

  • SSDEEP

    1536:9qsINqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2K3teulgS6p:rAMOY3+zi0ZbYe1g0ujyzds

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

45.137.22.143:55615

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2388-30-0x0000000000400000-0x000000000041E000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections