General

  • Target

    2796-255-0x0000000000E30000-0x0000000000E4E000-memory.dmp

  • Size

    120KB

  • MD5

    034891b4bae855f50f0830505d3ddfa6

  • SHA1

    0dcf8a73a6a7d8348ac9d2714191b08e897955f9

  • SHA256

    07c2371e7fd56b68e7c1bb40719a02099dd4c5adfb6cebf519fa138083c0f1c8

  • SHA512

    23741f2921cc47028d6292a4dfd61afcafd7c9137412647ee1055cad88fd3706b672f8e4f0525b67af39296e193033a9f03c37da5f49b50df01a89ea1b99fac3

  • SSDEEP

    1536:5qskoqu3lbG6jejoigIH43Ywzi0Zb78ivombfexv0ujXyyed2atmulgS6pZl:Xt1FYH+zi0ZbYe1g0ujyzdeZ

Malware Config

Extracted

Family

redline

Botnet

pixelscloud2.0

C2

85.209.176.128:80

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2796-255-0x0000000000E30000-0x0000000000E4E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections