General
-
Target
2824-327-0x0000000000AC0000-0x0000000000ADE000-memory.dmp
-
Size
120KB
-
MD5
6d9e60c400c9ee1ab4cf134e75771ae2
-
SHA1
cf8a06298e072e3c2dbb0c9020209e80b10103a4
-
SHA256
ab3c0b0496b652baba7626448b38d90ab5ef2103e53136407bca08c4469dc344
-
SHA512
ccf8093bab29343d27e8ce81c9a4062a9a527d41f7a0545c853e419c6e9b47eff7dbb96bbec2bea31d21237168c4784f0ba26e15a1eb0bca55973a9385639001
-
SSDEEP
1536:5qskoqu3lbG6jejoigIH43Ywzi0Zb78ivombfexv0ujXyyed2atmulgS6psl:Xt1FYH+zi0ZbYe1g0ujyzdes
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
pixelscloud2.0
C2
85.209.176.128:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2824-327-0x0000000000AC0000-0x0000000000ADE000-memory.dmp
Headers
Sections