General
-
Target
2468-246-0x0000000000950000-0x000000000096E000-memory.dmp
-
Size
120KB
-
MD5
2b7da28916b9aec77d18512fe3e70b3d
-
SHA1
7b5d28449d534ea90b2e4c676ca01df1bd47b770
-
SHA256
03adafd068ff4c191aaf3676200f5f1cc9ff6c2e223d61175708c041785585eb
-
SHA512
c4d8f0e204479dd1c2835379cfae69d6fb7cce8c0f87acab88a7c07f3327019ac6cdffbd31f82ab8dbee9c1fecb5d7581185c654a4be82058e35d26e0a9b5b7d
-
SSDEEP
1536:PqswXqrzWBlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2PHtmulgS6pD:tegzWHY3+zi0ZbYe1g0ujyzdOQD
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
pixelnew
C2
194.49.94.11:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2468-246-0x0000000000950000-0x000000000096E000-memory.dmp
Headers
Sections