General

  • Target

    Repugnance.exe

  • Size

    300KB

  • MD5

    eecbb3eca9edfcd95ec7db564aa3db92

  • SHA1

    74bad751e5b6b8a746e6b0c6b7b257c88c5d849f

  • SHA256

    165694667ff2037b7167acf8d9727a05ae611497c1a7fb69a20287a74f558500

  • SHA512

    d298f93f62711a23223571bc94fe7d267bf31827ae45cac49a6ed0dcc562181b5ccea9aea6df4569e8efd7b8595b3756abcb8837f2579e3eed5a704e532ac03d

  • SSDEEP

    3072:s2+Lb3YMQ4SvxLMb8gOlN2FEOacCK9sEdYYXEnszxOnRRAgkVMRqT6Dv/YSeqiOS:x2b8gOjcCWYYDxOnDAXVMRqT6D4AL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

@oleh_ps

C2

185.172.128.33:38294

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Repugnance.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections