Behavioral task
behavioral1
Sample
cf474d186c9d81aa7d9ba7837754cca0.exe
Resource
win7v20210408
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
cf474d186c9d81aa7d9ba7837754cca0.exe
Resource
win10v20210410
windows10_x64
0 signatures
0 seconds
General
-
Target
cf474d186c9d81aa7d9ba7837754cca0.exe
-
Size
100KB
-
MD5
cf474d186c9d81aa7d9ba7837754cca0
-
SHA1
caa5640f4085238c0c84a191a38d85aaaa6e42fe
-
SHA256
3cc3678682dc887a9f5e168717967fc266e266a5fd5dfe10e210d26b7246e5c4
-
SHA512
c2e1dba69d89ca28ac5306d57922f2ac2e90cdb0b15846bc963a472b9bf87874c0fb9ec5435091ad59fe4b6d7deec6719369bea12af3267011fcd02f0948f960
Malware Config
Extracted
Family
redline
Botnet
@mecenaty
C2
51.254.69.209:48987
Signatures
-
RedLine Payload 1 IoCs
Processes:
resource yara_rule sample family_redline -
Redline family
Files
-
cf474d186c9d81aa7d9ba7837754cca0.exe.exe windows x86