General

  • Target

    24bef0efdfe16343ddb5d57a77914673

  • Size

    104KB

  • MD5

    24bef0efdfe16343ddb5d57a77914673

  • SHA1

    d127f1cc3c101d341d7db9108af6415d76419729

  • SHA256

    84a83c7085ac58584c64dd99b32358cd0bc316ebdd7c787fd121332aaaecd845

  • SHA512

    a58f4883f28a48b9ec6a2c79c7664c8121957c47b2488c613cfcb0a52b039a1e7d9047cd9ce7d0de0f2b9c3e76ebf96d5bff38a331d1f4b1ac82ba1854087a56

  • SSDEEP

    3072:2XqSGF3ioT51cpIzing+0Xm3kjQymd/MpBQ:xSo7Xm3k8yMe

Malware Config

Extracted

Family

redline

Botnet

@neneroxy

C2

81.16.141.203:28365

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 24bef0efdfe16343ddb5d57a77914673
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections