General
-
Target
2528-1115-0x0000000000B90000-0x0000000000BAE000-memory.dmp
-
Size
120KB
-
MD5
200c995d591ab8c5fa809a24c2c88189
-
SHA1
3e1e39181c04ebf8fb9d53ad3c023938cc3797a0
-
SHA256
6efe600ceb1c80e0798b5aba7e2e327e393a99ece828caa48b7badc74be877cd
-
SHA512
9b89061c6dc3f1da634a224970d6e43c8c5cbb0f90f27cb70a2fee6adbd442c20500adc1702496a346fda457736503f4593e0875fa8a7f3be8eb3de30d68dee8
-
SSDEEP
1536:Xqskaq+A/lbG6jejoigIP43Ywzi0Zb78ivombfexv0ujXyyed2kteulgS6pnl:F7ZeYP+zi0ZbYe1g0ujyzd0n
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
pixelscloud
C2
85.209.176.171:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2528-1115-0x0000000000B90000-0x0000000000BAE000-memory.dmp
Headers
Sections