General
-
Target
8324-1448-0x00000000001A0000-0x00000000001BE000-memory.dmp
-
Size
120KB
-
MD5
a8668ab4a4fa885ad9a6b99e3749333a
-
SHA1
2b60670d7d778a8bc37729e3c1599d39d09db27b
-
SHA256
199150fc10b5d3c2e78eaba4f85a9fb1bd85cf47d1beceb4d2fb73105210bcfe
-
SHA512
60cddb6c1a80e11ac3992b4fbe652c583017d0797cdd48d2f49ff00fdd0ed7928ff4bab302c9331b8167b814b225f8b388ef97f1b0cdb8f38e6ef9bc1c21e3fe
-
SSDEEP
1536:9qswXqrzWBlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2PHtmulgS6pY:regzWHY3+zi0ZbYe1g0ujyzdOQY
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
pixelnew
C2
194.49.94.11:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
8324-1448-0x00000000001A0000-0x00000000001BE000-memory.dmp
Headers
Sections