General

  • Target

    2760-223-0x0000000001210000-0x000000000122E000-memory.dmp

  • Size

    120KB

  • MD5

    288aa0cfbfc71924254ae40c27f27bdf

  • SHA1

    24a7839529b48ff00605073a357fcb0a4cea48fa

  • SHA256

    d2629e093c3fdbd06ec2ab90370480167c6ac9e7d22b5891bfb2618746ab5c28

  • SHA512

    fef97195e206db20d7af699b491661ec9bfe1cd1cf137dc40bf5745326640fdae0650fdc008425a9e4ce198d7ea5b67100b4e68a27e548a1ff656e14bc37c084

  • SSDEEP

    1536:yqswXqrzWBlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2PHtmulgS6pa:QegzWHY3+zi0ZbYe1g0ujyzdOQa

Malware Config

Extracted

Family

redline

Botnet

pixelnew

C2

194.49.94.11:80

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2760-223-0x0000000001210000-0x000000000122E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections