General
-
Target
2420-277-0x0000000000100000-0x000000000011E000-memory.dmp
-
Size
120KB
-
MD5
8b536b0652d85ef900a43b8d08d7554b
-
SHA1
13b432da4cec53736485c909d6861321b0bf2bf4
-
SHA256
7136df2498dee3eb84de9c6351a665f4bda7596c8dda2d52f25691f4a3796388
-
SHA512
71717e11c055cad10d163f98b3f36994fe48a5a5680a2914673b23c55b08d887fd90269612250f788383639172c13d9298d80d992ea3cfbb2c66dc4c6ab3ad18
-
SSDEEP
1536:8qskoqu3lbG6jejoigIH43Ywzi0Zb78ivombfexv0ujXyyed2atmulgS6pYl:Kt1FYH+zi0ZbYe1g0ujyzdeY
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
pixelscloud2.0
C2
85.209.176.128:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2420-277-0x0000000000100000-0x000000000011E000-memory.dmp
Headers
Sections