General

  • Target

    2736-273-0x00000000000C0000-0x00000000000DE000-memory.dmp

  • Size

    120KB

  • MD5

    93827ce1af607266a76d76862ab54b65

  • SHA1

    eab4e6beb06f0db3a9ceb108df2e43abe8295cfc

  • SHA256

    9d8ff4382db03ba72e7938f3cf5e9fcf4e95b8951e140961b296e371657c534b

  • SHA512

    0e55e6a46382560c6c545d3001e12b7e8baebd1317d79d9ac59c216c59e877938cc4b5497b8ddec468ba84f9e076444015907db357b04dd777e4513ccb32e108

  • SSDEEP

    1536:Iqskoqu3lbG6jejoigIH43Ywzi0Zb78ivombfexv0ujXyyed2atmulgS6pMl:mt1FYH+zi0ZbYe1g0ujyzdeM

Malware Config

Extracted

Family

redline

Botnet

pixelscloud2.0

C2

85.209.176.128:80

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2736-273-0x00000000000C0000-0x00000000000DE000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections