General

  • Target

    rocket.exe

  • Size

    172KB

  • MD5

    e67c3579198e6b84e85ffe74efc921dd

  • SHA1

    01204728c00c8103254b988ce44a1a9ab02ca8e3

  • SHA256

    dd7559d441f5207d13dd4e8486af5146085c326b27e0ba2b4a72acbcd2a60984

  • SHA512

    dfe6f88dedb12c9fbdf204073ee40ca24d7a4e7faf12329cfef58d13d21fc2f41380a701f21175569384ade37f78efb37f19bda80b73da67f3d85861e9b59033

  • SSDEEP

    3072:EL33Lwu1GhyzOPwZxNhaB2m/gw69b8e8hD:sLaJwnW/gw69b

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

Rocketpro

C2

94.142.138.212:26540

Attributes
  • auth_value

    7ec2b1cebe4360f7f11bb80bbf7d8b26

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • rocket.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections