redline | 37b47855b6e7dac7af7fa051c819199018f8fd06040054bb1c8cdaad64887c40[.]exe

General

Target

37b47855b6e7dac7af7fa051c819199018f8fd06040054bb1c8cdaad64887c40.exe
Size

95KB
MD5

ac5f78eb678258499cf14f06e7c3c20a
SHA1

ae158c6e81bd36714b27697ca6537284f25964b4
SHA256

37b47855b6e7dac7af7fa051c819199018f8fd06040054bb1c8cdaad64887c40
SHA512

884d8983c815342322efde132b9ae25547c8b87ee00205106e3d2c77d999259dd27036543147103c3ef3332ac293769e62ac72fc7cb1186fd562eda4288776f5
SSDEEP

1536:9qs+XqrzWBlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2t33tmulgS6pY:r0gzWHY3+zi0ZbYe1g0ujyzddY

Score

10^/10

Family

redline

Botnet

cheat

C2

54.39.249.56:61562

Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_Binary_Embedded_Crypto_Wallet_Browser_Extension_IDs

RedLine payload 1 IoCs

Processes:

resource yara_rule

sample family_redline
Redline family
redline
SectopRAT payload 1 IoCs

Processes:

resource yara_rule

sample family_sectoprat
Sectoprat family
sectoprat

resource	yara_rule
sample	family_redline

resource	yara_rule
sample	family_sectoprat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
37b47855b6e7dac7af7fa051c819199018f8fd06040054bb1c8cdaad64887c40.exe