General

  • Target

    Lisect_AV-T_G3_2.exe

  • Size

    219KB

  • MD5

    a39484e0cd5fbe072920a2778be58b4f

  • SHA1

    260bd1c99f48149e340d857fa76d09f597c6c5ce

  • SHA256

    5d41f66f776568a285a5be5dd829cb1555c5431f825c3db63a803a8ab1316949

  • SHA512

    94f7f554b5d1858c2eff487b7f6a5443345261a4a819d351b51dadb9d81e0bf3bb6a90049ddd26777706d7357a0758211431d39f01b31f05c40e371906284dd3

  • SSDEEP

    6144:VcrZwy7MNgcY/rV0JedCDK/c8u4c07m1SkPi:V4QNgcY/rtCGtxc/Pi

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

PERSOM-1107

C2

194.49.94.77:22888

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Lisect_AV-T_G3_2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections