General
-
Target
2536-258-0x0000000000220000-0x000000000023E000-memory.dmp
-
Size
120KB
-
MD5
c55d5db773dd0e7f7ed16bc6ae02b0d1
-
SHA1
adfccfe53caa42dc40528c43dde503f1b6ecbad9
-
SHA256
1452594c8687f30bf027a709cfcd0afa21ff54e8874319c6bac690c9d72dbdd5
-
SHA512
4d92c695c828340b3164ea66655c107197272987c291ba01b2080793a04df76a9781342279c87331d22ba7c9ab961950ce98be1c06eb65be9495b2619e32888c
-
SSDEEP
1536:oqskoqu3lbG6jejoigIH43Ywzi0Zb78ivombfexv0ujXyyed2atmulgS6pyl:Gt1FYH+zi0ZbYe1g0ujyzdey
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
pixelscloud2.0
C2
85.209.176.128:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2536-258-0x0000000000220000-0x000000000023E000-memory.dmp
Headers
Sections