General

  • Target

    2084d28241ad256007d75d930e28361a.exe

  • Size

    304KB

  • MD5

    2084d28241ad256007d75d930e28361a

  • SHA1

    4d240b571ffaa1020be7da9dab71b2b1e8f0e9f9

  • SHA256

    cfcb07d0c4e18c98cde36caa2ea5ee4f1617d05026b0845f87c6226d3a49c61c

  • SHA512

    561b6b3c4336daf57b44b428b604ba0474765d365c7b3bcd474cc06443f6864ec71edf4d20479a41da20fc8f95210aedcd7b2c6816e0b0eb8dcba70f703715c8

  • SSDEEP

    6144:xqY6iewP8Y/bfYzJjTATAbQcZqf7DIPL:xSwPYzJeAbQcUzsP

Malware Config

Extracted

Family

redline

Botnet

@cloudcosmic (https://cloudcosmic.store)

C2

87.121.105.175:14845

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2084d28241ad256007d75d930e28361a.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections