General

  • Target

    665257d2e600180970af272d6ec682ec1a42959de375813a3f358efce8f2458c.exe

  • Size

    298KB

  • MD5

    b7ef46030488cc9077ee3aee05019001

  • SHA1

    a9ef730de2589b8c7103c181ea3e794ae3c52698

  • SHA256

    665257d2e600180970af272d6ec682ec1a42959de375813a3f358efce8f2458c

  • SHA512

    f554ec4b1524869bfa0efdedb810aba7dea37feb1d7f6487059fc630fdecf5ea153eb422dce5583908ab840335a0e0860e547b7c33113b4966fff8297dfcb317

  • SSDEEP

    3072:NqFFrqwIOGtwygmQZweFapa4jdbJbYk0naVbhd4mTZbeHg/cZqf7D34teqiOLCbM:kBIOG2yAWUCdlTZSKcZqf7DIXL

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @logsdillabot)

C2

5.42.65.129:2353

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 665257d2e600180970af272d6ec682ec1a42959de375813a3f358efce8f2458c.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections