General

  • Target

    2176-732-0x0000000000B40000-0x0000000000B5E000-memory.dmp

  • Size

    120KB

  • MD5

    9484a2c81e12a8692e0970e8f33301a3

  • SHA1

    ebf8f069a51cdeccbf6ae546047eb52e814345d6

  • SHA256

    f884177cd3ace2663712dbeabd1d0233cdd5b4a2144348b1fb54979e5e8f67a6

  • SHA512

    19b22e36c8adddf9157180e064517068bfce5765d4f07ff7db8f6e82c62c7c9d87deae567354081e76576438f83407dddb48b1c3e759d1fe1a6b74a5fb78bbc1

  • SSDEEP

    1536:4qskaq+A/lbG6jejoigIP43Ywzi0Zb78ivombfexv0ujXyyed2kteulgS6pMl:W7ZeYP+zi0ZbYe1g0ujyzd0M

Malware Config

Extracted

Family

redline

Botnet

pixelscloud

C2

85.209.176.171:80

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2176-732-0x0000000000B40000-0x0000000000B5E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections