General
-
Target
2764-488-0x0000000000920000-0x000000000093E000-memory.dmp
-
Size
120KB
-
MD5
bcb73deeb9683cd3c54004a302815ae7
-
SHA1
770a4e007831313b0d939b61dcd442f563a3bce0
-
SHA256
0e98a983c7bb1398c92f7cce8abdc56df020d2495e2c278f8447262d77f57d63
-
SHA512
0f32f11e0e87cf0042d52e6fd1b1145691cd26b8c2a0d30769c79a0f83d9a0d4a2a0718367a4f26b72652f9ec92dd7f8c7d833185f91cee8833b111b1fa4d78e
-
SSDEEP
1536:4qswXqrzWBlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2PHtmulgS6pS:WegzWHY3+zi0ZbYe1g0ujyzdOQS
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
pixelnew
C2
194.49.94.11:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2764-488-0x0000000000920000-0x000000000093E000-memory.dmp
Headers
Sections