General

  • Target

    2e2fbede9031283a63416898456b2190

  • Size

    98KB

  • MD5

    2e2fbede9031283a63416898456b2190

  • SHA1

    3920bf865e52864d5dfe4dea75c04e63cb99a574

  • SHA256

    c0766842d777c819b82789c97453c1ac6bc57e9886c1a20b2c4026f61e786faa

  • SHA512

    ccac7bda53e5f38366a2e4e26438edd1e66af7b19bff3ab4432b78ee00d86195c373dc798e3599171667b38dd28d6b90676e07d4318ce9278714d23a47f0d7be

  • SSDEEP

    1536:f3LNmocOW9JrRiAb9UJFB4mbfexvOu8UyyedQh3zqCxXsESG6ijoigC:fxmocAK9UJrlgOuHyzddSnB

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

11

C2

135.181.104.154:22167

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2e2fbede9031283a63416898456b2190
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections