General

  • Target

    ddb8722777d92855ca4432db01a5277638fc97a1516301fe5e6f5862c85aa93a

  • Size

    127KB

  • MD5

    24f65ba032f6c1ab76f10e50e846cc69

  • SHA1

    21e68c9239abd7c734c1b38c806640d0700d9d19

  • SHA256

    ddb8722777d92855ca4432db01a5277638fc97a1516301fe5e6f5862c85aa93a

  • SHA512

    34113fa115dbcef8be782f33ff819a105ab587f7750059221655d57de1fd38ca7536d98891423d82c9a443a4c83a14c74773fde261084e19acdc4df96987ca62

  • SSDEEP

    1536:pazcnVHT1C/oXNpYA+fewN8wL/y/SFmDKnw967/hYjZjbV73/OAOysYgibfbFDK0:kzcZZb62c8+yKmE1yPdGVYgafJlR

Malware Config

Extracted

Family

redline

Botnet

@rocketprosupport1

C2

104.211.55.2:80

Attributes
  • auth_value

    d3e217c2eab07f2abc41ade13a666e65

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ddb8722777d92855ca4432db01a5277638fc97a1516301fe5e6f5862c85aa93a
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections