General

  • Target

    50b71b926697f9fea0ddd08f53172cb2.bin

  • Size

    240KB

  • MD5

    50b71b926697f9fea0ddd08f53172cb2

  • SHA1

    566c08d8ae6ec068e1588dbab3d33ec73a812c0f

  • SHA256

    3ba68cb97a8e9a0fdefe2853f89bda22e86971b4d9bb07cf6f4ebcbc32c8bd67

  • SHA512

    edc89b68add0d26b59784c8b2f125e669980084167529941d62daa43e0b7dbb48e6e229633289b99ef968803ae2953848ad8dea1708daaa49527ea1781a32548

  • SSDEEP

    6144:rrzkuv7SNgcD8rPEsCxG90EY1SGSI11AK:rPsNgcD8r/CSI11AK

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

194.49.94.181:40264

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 50b71b926697f9fea0ddd08f53172cb2.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections