General
-
Target
1944-278-0x0000000000A50000-0x0000000000A6E000-memory.dmp
-
Size
120KB
-
MD5
9b5d410957706a7b8c4ad625afd28658
-
SHA1
da5984a16c51ea5ebc88212ccfc3440497f4a12d
-
SHA256
475e28a39032223dff1e591dca9a501fe91bad2ea6fe0ed63538204dc1d0c704
-
SHA512
bc5c19c2f42a2f0c2898c508fbf60cbae48f34a52353bbe7a354ef3e7732ca27e305c6d99bd64ec2f49411e61efceaa08a5ac9ca74f54c5354a4a156d53b93d7
-
SSDEEP
1536:vqskoqu3lbG6jejoigIH43Ywzi0Zb78ivombfexv0ujXyyed2atmulgS6pjl:Nt1FYH+zi0ZbYe1g0ujyzdej
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
pixelscloud2.0
C2
85.209.176.128:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1944-278-0x0000000000A50000-0x0000000000A6E000-memory.dmp
Headers
Sections