General

  • Target

    358fd4aa861d29a325395f37cc2cfbaa

  • Size

    98KB

  • MD5

    358fd4aa861d29a325395f37cc2cfbaa

  • SHA1

    8eb71d090410d431073ccc640b6db7c2ca5a6025

  • SHA256

    1d5199b1fe55d47a51a1d71399aad11e76ea1fedf29706a480133ad4e5c5e241

  • SHA512

    8deafd4690fddf7d2c390c68d5cd82bf443b5ff05a624f049c2d0af5b80d06ee4401ea75eb14add2594f104392b193b4a47cc824ae6c685c70e008d6a715626d

  • SSDEEP

    1536:W3LNmocuEolidargPa7JFnP+4mbfexvGuvVyyedQ03rqCxXsEeG6ijoigM:WxmocQrP7JJ+lgGutyzdcSnv

Malware Config

Extracted

Family

redline

Botnet

[@wsappp1]323

C2

103.246.146.46:50702

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 358fd4aa861d29a325395f37cc2cfbaa
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections