General

  • Target

    2740-245-0x0000000000070000-0x000000000008E000-memory.dmp

  • Size

    120KB

  • MD5

    8ae05af4f5b3a4268ce4d5dedc9761b6

  • SHA1

    fb32c1a50411c9c6584c2aa1d7d72f83bc2c2123

  • SHA256

    3a57d4d6403e7969866f26dcef99418648d82eb49fc5b819c67a9d43000c952e

  • SHA512

    9c77c9d578df46e268c6bd9b5de391e1f24ca6bb9564545619c90071a0a71de2ef6cab71cf2d7cc1214dd800a2f7f7b558952db4611d197e4ac5161b57e68429

  • SSDEEP

    1536:mqskoqu3lbG6jejoigIH43Ywzi0Zb78ivombfexv0ujXyyed2atmulgS6pFl:Ut1FYH+zi0ZbYe1g0ujyzdeF

Malware Config

Extracted

Family

redline

Botnet

pixelscloud2.0

C2

85.209.176.128:80

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2740-245-0x0000000000070000-0x000000000008E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections