General

  • Target

    1080-253-0x0000000001330000-0x000000000134E000-memory.dmp

  • Size

    120KB

  • MD5

    bbd6ac1f76369c6cbdd976c171f1c8ce

  • SHA1

    c128f55fa3225906a7af99f478b316e7032d505e

  • SHA256

    0500bfa9fcb6ca37f55434c0f56d33546a9e6727c352bcfd2078b4f7259491aa

  • SHA512

    1ac1721042f04528c77df7a3e43b404bd789338f3ddd836f834c119df0d1f6f0c9a036d2d58bc763d9ab74b0850e6a7ba3084b808bf838788f0e58e251370e96

  • SSDEEP

    1536:wqswXqrzWBlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2PHtmulgS6pU:eegzWHY3+zi0ZbYe1g0ujyzdOQU

Malware Config

Extracted

Family

redline

Botnet

pixelnew

C2

194.49.94.11:80

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1080-253-0x0000000001330000-0x000000000134E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections