General
-
Target
1976-28-0x0000000000400000-0x000000000041E000-memory.dmp
-
Size
120KB
-
MD5
2377ee50f149bb4612110b8ee5ca663d
-
SHA1
eaffbc2c4718e2db420b23a9d771395f61745859
-
SHA256
c8c3272a539db9aff1acc4f7e8733868144ea049250fbf6de95d81f369f813de
-
SHA512
5d630fe975dc013f65ccbcc1994d89a7ad4d33ba1f7af11641dafed7e676b3f868c89a037f2a0c9792c4de4084126392f5bee29be192dcc12ddab6483e0114f8
-
SSDEEP
1536:9qsINqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2c3teulgS6pY:rAMOY3+zi0ZbYe1g0ujyzdyY
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
cheat
C2
185.222.57.91:55615
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1976-28-0x0000000000400000-0x000000000041E000-memory.dmp
Headers
Sections