General
-
Target
2064-299-0x0000000000840000-0x000000000085E000-memory.dmp
-
Size
120KB
-
MD5
0b0094838d57dacee890f5d9407e091b
-
SHA1
cc5abbadd5cd886a92c3b42c65495373d80f1ef7
-
SHA256
01c25dd62d1d98856363c793d9c8e77bee2135b36ef9db03fe7494d0ec841feb
-
SHA512
3033b8fd0474d2b4f7c1ad806590ae81411d9157f64bfa233c0f9917a86859df5f80ac50a405068cc2da3b45cf79424b8058d8c29aa638942083944aa33830b7
-
SSDEEP
1536:Aqskoqu3lbG6jejoigIH43Ywzi0Zb78ivombfexv0ujXyyed2atmulgS6pUl:ut1FYH+zi0ZbYe1g0ujyzdeU
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
pixelscloud2.0
C2
85.209.176.128:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2064-299-0x0000000000840000-0x000000000085E000-memory.dmp
Headers
Sections