General
-
Target
6636-1006-0x00000000007F0000-0x000000000080E000-memory.dmp
-
Size
120KB
-
MD5
1e34661b0fb134d7695bad5d04802f78
-
SHA1
5f957702c22f7fb27719ba6acac7297d3619d17e
-
SHA256
78a1a3951899a2f916d6636efc9af5550d6f97438ae10555d3c3785ff1825d1c
-
SHA512
4d21ac0e580cc9b230e5209b4c91356f72ebaf32db64a27b2eb16c06809b7028ae5e7ce2b68378c1960d62c73c960492fac95347a5bfe64d4f0fe49f94220771
-
SSDEEP
1536:aqsCwqR7lbG6jejoigIL43Ywzi0Zb78ivombfexv0ujXyyed22teulgS6pw:IDmRYL+zi0ZbYe1g0ujyzdGw
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
LiseCloud -- LiveTraffic
C2
107.189.17.186:28269
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
6636-1006-0x00000000007F0000-0x000000000080E000-memory.dmp
Headers
Sections