General
-
Target
3068-326-0x0000000000090000-0x00000000000AE000-memory.dmp
-
Size
120KB
-
MD5
0d442c788b3aec07fc86def0c290cbc8
-
SHA1
2cbc0a939280d28d31ab0d9887b5ba32acc77f53
-
SHA256
0927a22f0cf437b1ff3ac3c27478b70a8b5f1ef75a729e122665bfccd9b9a827
-
SHA512
e8e5c97c9dcbdef1b9e6c622d46a5ae72e41e2f2758dfdd5f4bac3fe27ba5e44e3e7a4d775c9004b0b0543c1d27ee4208158bc771d8e71a82e73a32f3a64dc49
-
SSDEEP
1536:2qskoqu3lbG6jejoigIH43Ywzi0Zb78ivombfexv0ujXyyed2atmulgS6p/l:kt1FYH+zi0ZbYe1g0ujyzde/
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
pixelscloud2.0
C2
85.209.176.128:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3068-326-0x0000000000090000-0x00000000000AE000-memory.dmp
Headers
Sections