General

  • Target

    520-1163-0x0000000000940000-0x000000000095E000-memory.dmp

  • Size

    120KB

  • MD5

    c9356dfae4ea50e79f7a566951d7cadc

  • SHA1

    9b2c7620ff49cbd7e4d6e565b32f481611ddfbbb

  • SHA256

    a2a82e5cb1a999641834887c83ed5498bc3af75853e1e1cd52654d6e4645654d

  • SHA512

    8312aa1217ac7cb55edc596788935aa775e564888112b29879dd1ad967cc456cfa6e85dc2f9d9547f6756bf746777d3ffbb6dfe2f1f22181bd51c7a5e23bd5e3

  • SSDEEP

    1536:1qskoqu3lbG6jejoigIH43Ywzi0Zb78ivombfexv0ujXyyed2atmulgS6pkl:zt1FYH+zi0ZbYe1g0ujyzdek

Malware Config

Extracted

Family

redline

Botnet

pixelscloud2.0

C2

85.209.176.128:80

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 520-1163-0x0000000000940000-0x000000000095E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections