General
-
Target
364-292-0x0000000000DC0000-0x0000000000DDE000-memory.dmp
-
Size
120KB
-
MD5
716963d00406c1d66e1ede3a79d41d33
-
SHA1
17e06624d36e74e3a8ce1c313337e1269250e167
-
SHA256
323b302f1572b7e40e43d2496792d9c4838eb6bb83cf2b96cc414dfa5fc6b541
-
SHA512
97fc0aa1025b4d973728d4d84176ef0a02135fc8009b8f8d3d8ae36ffc77937516ee8ae7f73a94156e0b365d15fe1c20a058ca9043cd00873e89ac95ffde91c8
-
SSDEEP
1536:Zqskoqu3lbG6jejoigIH43Ywzi0Zb78ivombfexv0ujXyyed2atmulgS6pcl:3t1FYH+zi0ZbYe1g0ujyzdec
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
pixelscloud2.0
C2
85.209.176.128:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
364-292-0x0000000000DC0000-0x0000000000DDE000-memory.dmp
Headers
Sections