General

  • Target

    7a51a34ca5ccfe6eb43ef6abc0f92d46

  • Size

    95KB

  • MD5

    7a51a34ca5ccfe6eb43ef6abc0f92d46

  • SHA1

    115643f90fb03144d2486f3a5f1b67d9cd8b42f1

  • SHA256

    5675b6a982a8224078a4c5338480f37f536a29ade205f85a39d2cbe6cc28815d

  • SHA512

    e4756b82c6d8e82885842439d87675d8227ac0375d4b363f411caef06e7f3179d4a406d58ee5167826f9f3b5b3efd31f727ec6e2efa62eb0b1a5d13e134d8f88

  • SSDEEP

    1536:5qskbqDylbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2HtmulgS6p8l:X2wiYj+zi0ZbYe1g0ujyzd38

Malware Config

Extracted

Family

redline

Botnet

11/21/23

C2

91.92.241.80:1337

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7a51a34ca5ccfe6eb43ef6abc0f92d46
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections