General
-
Target
740-11-0x0000000000400000-0x000000000041E000-memory.dmp
-
Size
120KB
-
MD5
0c7174bfa9d4a246e19f848abd553f5b
-
SHA1
5f9ba35122d7c7f3e4f9602ca493a8f6c08a8ee0
-
SHA256
d5d975839ffea63403dce0ee7e8847cd3d0173836f1b95bbd3414636a5c8ef9c
-
SHA512
d9cceb1fa4b0e153290ad5147fb864ae86c0e093803b058c92e4e840a95029f5d525da33c501c164e7881418f0637e77550ff77f7d42fd84b3cee982729cecf4
-
SSDEEP
1536:5qs+bqDylbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2AtmulgS6p8l:XIwiYj+zi0ZbYe1g0ujyzdc8
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
vex4you
C2
209.38.151.4:55123
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
740-11-0x0000000000400000-0x000000000041E000-memory.dmp
Headers
Sections