General
-
Target
3056-1172-0x0000000000A90000-0x0000000000AAE000-memory.dmp
-
Size
120KB
-
MD5
ff361eab921dd27677e2631d9e502acb
-
SHA1
85aebbe3a12a55fdc1debb234e8721cdb6a9b95b
-
SHA256
d3d85dffbaa1dd2e31fbcac3dfe28980f01b0aaf048e0c1149e56fd1f4304376
-
SHA512
a06080b70a42902ae19ee1f4da3bdb5e884e79cdc62fed8439bf4efd2723d63f8ce5000ee172c48fa0dd468a74dbf2e066fac1ea14d05306b700c5d11fc53dfb
-
SSDEEP
1536:lqskoqu3lbG6jejoigIH43Ywzi0Zb78ivombfexv0ujXyyed2atmulgS6pfl:jt1FYH+zi0ZbYe1g0ujyzdef
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
pixelscloud2.0
C2
85.209.176.128:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3056-1172-0x0000000000A90000-0x0000000000AAE000-memory.dmp
Headers
Sections