General

  • Target

    411ca7ba89ae45e92f9ed4663f903335

  • Size

    107KB

  • MD5

    411ca7ba89ae45e92f9ed4663f903335

  • SHA1

    6360b07844800b8e6e6e2b11ee3c8d051c4a2e96

  • SHA256

    6780a257463d037daff9f626aecee2347177edfb0851ee12d33ba225ab38f009

  • SHA512

    bfd58e96af22f17fab2cff4b360d79621b738128c61f01420963a1119d27320eb97a64fef42819e9ea7ffab39289f19b82f8911e227236435a87151d55d9e754

  • SSDEEP

    1536:Kt9pmqnRshOY9YWdO0VZs5WCict0nii+jbuqGdTnQuyq+dR+vdDjEmG6qTaoigi:YfRshZ9Ya7/s5WCi30GTn3yjdR0Yry

Malware Config

Extracted

Family

redline

Botnet

@soul3ss

C2

188.130.139.12:30376

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 411ca7ba89ae45e92f9ed4663f903335
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections