General
-
Target
3064-309-0x00000000009E0000-0x00000000009FE000-memory.dmp
-
Size
120KB
-
MD5
ad2cf49d844e2ac820eb45ffa29bdee8
-
SHA1
18083536209e5ff01f049ea9b69d2d54645174d4
-
SHA256
3597bcdc798f39d6ae55422859a3d17dbd60ea76a4c5a1db7ef959b8b414b066
-
SHA512
824b22f5efef062dcd442809a2e54025d3ae2f98dfec58fe6b0d2d222c0c2bc374a77629fc9326ae72c35427fc05cc7244fc8f631fdfa7e1ec9ba2d9af4039c9
-
SSDEEP
1536:hqskoqu3lbG6jejoigIH43Ywzi0Zb78ivombfexv0ujXyyed2atmulgS6p2l:Pt1FYH+zi0ZbYe1g0ujyzde2
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
pixelscloud2.0
C2
85.209.176.128:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3064-309-0x00000000009E0000-0x00000000009FE000-memory.dmp
Headers
Sections