General

  • Target

    4b6b4740cd341832ed82ce0291dae067

  • Size

    105KB

  • MD5

    4b6b4740cd341832ed82ce0291dae067

  • SHA1

    5a75032138855e5a63befa2fba01d1e3d1f50763

  • SHA256

    50641b6873076f461c03ebb7937514a2d4a5d494a5143492ad6b8b22131a2190

  • SHA512

    29b6407a817ed64ada95423165013064b18ca26e292af7d704799660c6a984a8f62e13f9f12edd77ed2ad8d0d3479da4573c22c5c509b49bbc68ea050b60a460

  • SSDEEP

    1536:Gm386AEAVv6BjsvcHFs7IRjIQzg73Kgbue7vhuFNyAsdOKi1xQeTEGG6WAaoigEJ:Gi86AdtWfFGQzgDD3hunyddWsvE0fUW

Malware Config

Extracted

Family

redline

Botnet

5k_COSMO

C2

45.14.49.117:14251

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family

Files

  • 4b6b4740cd341832ed82ce0291dae067
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections