General
-
Target
388f8e4c20dc864b76be96bd03826fb8a429954c4a5e8d1f947d9f7c16b0276a.exe
-
Size
96KB
-
MD5
19e6c1c8b45d1a18878d1f9c2fd211e1
-
SHA1
b22c0ca0112fe2b3b4d84e2baddca84d2e461973
-
SHA256
388f8e4c20dc864b76be96bd03826fb8a429954c4a5e8d1f947d9f7c16b0276a
-
SHA512
32be38283f4622493cf08340079ea6132de62a2c69e3251f83a93150191b182fb30bf3c87d87c7bb81145ca2f07297fb6f272a776db63a5b03bbc636888d2805
-
SSDEEP
1536:DqsSmqnflbG6jejoigIi43Ywzi0Zb78ivombfexv0ujXyyed2vltQulgS6pE:xJw9Yi+zi0ZbYe1g0ujyzdOcE
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
Checker
C2
77.221.149.0:5428
Signatures
-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
388f8e4c20dc864b76be96bd03826fb8a429954c4a5e8d1f947d9f7c16b0276a.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections