General
-
Target
976-607-0x0000000000BB0000-0x0000000000BCE000-memory.dmp
-
Size
120KB
-
MD5
9b70919764e03dd90870964d6f0bc691
-
SHA1
a331a66abcbdf5f722c8d144dda31406495a611c
-
SHA256
028b85f330d173a2e1fa3515e148adf9873094126f1f36f6c26396d802fff7e6
-
SHA512
7549009a38519e8709cb4ad8e5d9b314e04d39d1e24ab8021543f060cc3a07421548a8c30c89cb10f82773581596edfec05ecfdce09a58154ba0da4225b89f41
-
SSDEEP
1536:pqskoqu3lbG6jejoigIH43Ywzi0Zb78ivombfexv0ujXyyed2atmulgS6phl:Ht1FYH+zi0ZbYe1g0ujyzdeh
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
pixelscloud2.0
C2
85.209.176.128:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
976-607-0x0000000000BB0000-0x0000000000BCE000-memory.dmp
Headers
Sections