General
-
Target
2164-319-0x00000000013D0000-0x00000000013EE000-memory.dmp
-
Size
120KB
-
MD5
6a0f2c157c5a85f376875a27bf60af73
-
SHA1
aa88feb2e46b0dbbaf35a5a6d16df31329289c03
-
SHA256
4645c16b9daf2300ece7a69b10342ea1db537bd42b77a3d025a2b0c1ca576dd3
-
SHA512
9b1fd1fd4002d6c53ac129da48ae5c367cc952d130ccd24705b9df4cff041f7293d687523f48c79cd7d2574a1c67e742ca9191e64d551a73b636a2329cc6552e
-
SSDEEP
1536:cqskoqu3lbG6jejoigIH43Ywzi0Zb78ivombfexv0ujXyyed2atmulgS6pOl:qt1FYH+zi0ZbYe1g0ujyzdeO
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
pixelscloud2.0
C2
85.209.176.128:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2164-319-0x00000000013D0000-0x00000000013EE000-memory.dmp
Headers
Sections