General
-
Target
2828-13-0x0000000000400000-0x000000000041E000-memory.dmp
-
Size
120KB
-
MD5
ab12a7f5b91699a54298543dfd30f164
-
SHA1
13892b17eb8e6684b7b2f1fe52bfccb474d839e6
-
SHA256
93a0bb5fc51f632d8b80ab2c8d73178e8757c619718e9e9067dc0d5b664b74c9
-
SHA512
a813415f7118d3c9ee3007c0e225e5acf5722c101a9208d88ebd70114ba2832e6fb09270a00bf65ea63b269d73186e10f74af37234427bfbf7c6923df3afd873
-
SSDEEP
1536:9qsINqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2q3teulgS6pY:rAMOY3+zi0ZbYe1g0ujyzdsY
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
cheat
C2
185.222.57.71:55615
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2828-13-0x0000000000400000-0x000000000041E000-memory.dmp
Headers
Sections