General

  • Target

    5895d5ff150256b21fdbd62dc48b18e053753a754cec4b0efe4d016d5fe7d71b

  • Size

    104KB

  • MD5

    5755bc64dcf918c4fe54a5d81e934836

  • SHA1

    812baee52cb616caf03d8e6cdb977dc36481dc56

  • SHA256

    5895d5ff150256b21fdbd62dc48b18e053753a754cec4b0efe4d016d5fe7d71b

  • SHA512

    306329d9da6e03bc0599bdb6b4f40942f7e36e0699fbb82dbb08be3091031655dba02caad956ddb8a54dbb3d993ee46833349cda16b9a7fd6ca2ea3eb4095097

  • SSDEEP

    1536:JUVrx5RhiBBHD5KPys6V9KD2s2IpLYDUbYpfHXeRdGvsS100X:JUVvf8HDcas6vbshWDsKmjAJ

Malware Config

Extracted

Family

redline

Botnet

@MrShooterTCP (1991827185) [Ставка]

C2

91.243.59.52:1826

Signatures

  • RedLine Payload 1 IoCs
  • Redline family

Files

  • 5895d5ff150256b21fdbd62dc48b18e053753a754cec4b0efe4d016d5fe7d71b
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections