General
-
Target
2508-18-0x0000000000400000-0x000000000041E000-memory.dmp
-
Size
120KB
-
MD5
ccaff95dfe9d2a0e9906a32fad6b3561
-
SHA1
b6ac07e2d8db63ea077da6f8dfea43ff5ca1e0d6
-
SHA256
650d26fd37d47703e9ef9c40d3f9ab6b3d30b82209c01b3e0f9ff65fb71457ed
-
SHA512
12b99e5e9cb152b9f63a7ec68535e1d8f28f8c29a65fe3eb4ef3d1a51525327d02612d8001f764c2a6301d61b22682243e9b8903301bb6f0d071fb1829f69e61
-
SSDEEP
1536:YqsINqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2B3teulgS6pY:2AMOY3+zi0ZbYe1g0ujyzdpY
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
cheat
C2
45.137.22.173:55615
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2508-18-0x0000000000400000-0x000000000041E000-memory.dmp
Headers
Sections