General
-
Target
2504-275-0x00000000000D0000-0x00000000000EE000-memory.dmp
-
Size
120KB
-
MD5
1d664daf89bc18da06b87653073bf372
-
SHA1
764c590ea698758cff229b49361b8a5c8085d037
-
SHA256
5880bda92e685a8fcd590b0d228a3c4d9e5d93dae098d64b6ce14a5411371d0a
-
SHA512
89ce07972dbf60c17e713d99057e2f73cdc02a6cbabfcd9f359d8f5151943484e5be5529080b501d9f218dd9029a35ad8a775097c6f3897f4ab6b516e256f6b7
-
SSDEEP
1536:Mqskoqu3lbG6jejoigIH43Ywzi0Zb78ivombfexv0ujXyyed2atmulgS6p7l:at1FYH+zi0ZbYe1g0ujyzde7
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
pixelscloud2.0
C2
85.209.176.128:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2504-275-0x00000000000D0000-0x00000000000EE000-memory.dmp
Headers
Sections