General
-
Target
1736-575-0x0000000000FB0000-0x0000000000FCE000-memory.dmp
-
Size
120KB
-
MD5
8ba54cb9524984e12bf5da2aa7be4d8d
-
SHA1
738e931a3aff8827b119d7853be396d6e75e3cd5
-
SHA256
5c4a031c69e14cefc8d6e870bb7ad9bb65ea7eb95d9dad22620ddd4435ff4a49
-
SHA512
6e7d9c1d051c69ea302edcfe6fd5a3cc98dfac38162693860a5239488de8cf805eadd032b12f50390dc2c023e1fb87d57219f5dc602625e8b893e59a28df0339
-
SSDEEP
1536:TqswXqrzWBlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2PHtmulgS6pR:BegzWHY3+zi0ZbYe1g0ujyzdOQR
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
pixelnew
C2
194.49.94.11:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1736-575-0x0000000000FB0000-0x0000000000FCE000-memory.dmp
Headers
Sections