General

  • Target

    1f8b674642d5519ed2756d70d019e13d37a240affb8190d9c3c7a7beee1db149

  • Size

    95KB

  • MD5

    75c954c19a5aab5d1867cb726a959c49

  • SHA1

    e320ad25b9bb993e0e3d8a5737bea356f5ff55f5

  • SHA256

    1f8b674642d5519ed2756d70d019e13d37a240affb8190d9c3c7a7beee1db149

  • SHA512

    cd0750011430187bbf6ad93431a62fc7389667cded1332906d3cc13ffa949f1b132f265798df1eb8c0d450105cb46c4b6efc0913a17ba3bd2d637eefb766c8d1

  • SSDEEP

    1536:1qswlqWWlbG6jejoigI/43Ywzi0Zb78ivombfexv0ujXyyed2JteulgS6pg:zgReY/+zi0ZbYe1g0ujyzdVg

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

DEVIL

C2

127.0.0.1:54130

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family

Files

  • 1f8b674642d5519ed2756d70d019e13d37a240affb8190d9c3c7a7beee1db149
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections