General
-
Target
2404-1037-0x00000000010B0000-0x00000000010CE000-memory.dmp
-
Size
120KB
-
MD5
2b5bf0b7b2c67391155af839c93eda13
-
SHA1
40927b3070d621f5e2306b6e68c289df46209c43
-
SHA256
ece02636719fb2a28093302e454cc9a6e81c391f79bfe6010cf2a17e0d0331bc
-
SHA512
6ed4fcaa6a7f2b3ad5a7e941d72e444d27a714c094bf860ee9e11fa6961e4d3e35d74f3bf0a8ba71ac3fe09d7b2ce318f2585582256429e487bc12521383a860
-
SSDEEP
1536:IqswXqrzWBlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2PHtmulgS6p8:megzWHY3+zi0ZbYe1g0ujyzdOQ8
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
pixelnew
C2
194.49.94.11:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2404-1037-0x00000000010B0000-0x00000000010CE000-memory.dmp
Headers
Sections