General
-
Target
2548-198-0x0000000000E20000-0x0000000000E3E000-memory.dmp
-
Size
120KB
-
MD5
0a29c45097238bfd91a1f19114b9f8fc
-
SHA1
5e1d1645aa0bb9755c25013ab53fad59daec54d3
-
SHA256
787bebea1e1072260d489c1f34bb744ccdd24f1c441c600bc113f8060a54e8db
-
SHA512
4c18041be5bfc5b51d355318e44ecb327bfd0c87f01afe7c1a828478f8677f5aa1e8c384bb433fffccf83a1ca4463dbdcaecede993d373f14e4ed769d7d169aa
-
SSDEEP
1536:Vqskoqu3lbG6jejoigIH43Ywzi0Zb78ivombfexv0ujXyyed2atmulgS6pyl:Tt1FYH+zi0ZbYe1g0ujyzdey
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
pixelscloud2.0
C2
85.209.176.128:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2548-198-0x0000000000E20000-0x0000000000E3E000-memory.dmp
Headers
Sections