General

  • Target

    ProjectAspire.exe

  • Size

    203KB

  • MD5

    4b464dbca0a70ddc9a357b0ddfb8654c

  • SHA1

    3c37e54bbc599501cc82cef5769e37125537c476

  • SHA256

    34ee31adf966bf50a7fe0f897590b3002c25edc2a36f9ee70adebb7cc76da160

  • SHA512

    031d46f0a2a89741300ee4bc02e4d0c8e3565aa6f61cea43d2f41a436f1325be5f59f7524290eeca57b651a2f85ff2db3d95039fc2dedfc7af5da79b5f42e5d8

  • SSDEEP

    3072:IfnvBpBlvYWRoixNJiLeN66TxXEcLqbQobc8qw+IMK+:Ifllposn6KXLLqbnb+ID

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

YTCSGO

C2

57.128.155.22:4420

Attributes
  • auth_value

    3a2dd411247745383ccf627ae56a78a9

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ProjectAspire.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections