General
-
Target
2428-1122-0x0000000000DC0000-0x0000000000DDE000-memory.dmp
-
Size
120KB
-
MD5
2acea189f3ad7798376646542a7647a1
-
SHA1
095553d8eda7e3d137582f23d666f6b0fb509511
-
SHA256
05180c7debfbf7deb61f2807ec4123b3c64650651877fb8e0d4b953282590a51
-
SHA512
4e169b7e95844bde847e41681e6e5f8c5c48208d3ab2785d69309684ba3e1d7ae4876f5c4f6f2b3124ab1cf26127c3e2061520b53961a4c0e13ec0eb072d55f2
-
SSDEEP
1536:xqskaq+A/lbG6jejoigIP43Ywzi0Zb78ivombfexv0ujXyyed2kteulgS6p0l:f7ZeYP+zi0ZbYe1g0ujyzd00
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
pixelscloud
C2
85.209.176.171:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2428-1122-0x0000000000DC0000-0x0000000000DDE000-memory.dmp
Headers
Sections