General

  • Target

    5665f108965c55a2d3ebcbbb50b03786

  • Size

    107KB

  • MD5

    5665f108965c55a2d3ebcbbb50b03786

  • SHA1

    5f3500c5d5f646383e06033fb0650d9b83da98a8

  • SHA256

    a32770d46ee2ee5b91cc36e5159868ec3ff7f847e7516d7bcb952f7a94e347a2

  • SHA512

    cb6e052712ace47f371efdc93309ecc3bc7e85d897dc64e85c8fac3e436a3a714ffd140d465daf87a3f911f89bfbf4db90fe1bd7f579f5d108de51ace342b0fb

  • SSDEEP

    1536:Ot9pmCexBLOcBGdOjH5IzTUvpgnOnJPljbuqGdCnZuyq+dpV+dDjEuG6qTaoigl:8exBL1BKoHCzTQpYS3GCnAyjdpGYD1

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

Kasl

C2

51.254.68.139:15009

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5665f108965c55a2d3ebcbbb50b03786
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections