Behavioral task
behavioral1
Sample
3c795310fba80298492c46fd2a284873.exe
Resource
win7v20210410
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
3c795310fba80298492c46fd2a284873.exe
Resource
win10v20210410
windows10_x64
0 signatures
0 seconds
General
-
Target
3c795310fba80298492c46fd2a284873.exe
-
Size
107KB
-
MD5
3c795310fba80298492c46fd2a284873
-
SHA1
f057eb36c03c6d785d26bc6ca95d5d6f8f8ccda3
-
SHA256
55fd4b535cce4249de23d8eb6c823f0f000e9e988c72a5a88d55353d84692271
-
SHA512
40cabe677900de9eee08eea0b285dce689c18b5e2ab526d55d8983f19b14330f226d0a9d5d1f859c42f3f0cbdfcd5aa510c8a2c3d9ae0373f2f1b6e2f82470b0
Malware Config
Extracted
Family
redline
Botnet
@nTrill
C2
fastboomerzoomer.top:80
Signatures
-
RedLine Payload 1 IoCs
Processes:
resource yara_rule sample family_redline -
Redline family
Files
-
3c795310fba80298492c46fd2a284873.exe.exe windows x86