General

  • Target

    f2187917f7e2c764467787dbe25c4e52d646c31c5eaa76b8b430ded9e75c0063.exe

  • Size

    298KB

  • MD5

    2b266b9142176428dd6422adf5a5a104

  • SHA1

    21f84a7be892fc72dd41f551daae03d583c146f4

  • SHA256

    f2187917f7e2c764467787dbe25c4e52d646c31c5eaa76b8b430ded9e75c0063

  • SHA512

    1709739e48662e8337de202d35e334314421c3d60f16cdd991c3963fa32f12e0e8dd3b791aa9ec289ce7375aeba6d4f7951bb385da2cfccecc2ca1f5cfe03920

  • SSDEEP

    3072:lqFFrqwIOGLSy+/YtyVFNG+810+Yj2GtwhdukTZbMHIXcZqf7D34VeqiOLCbBO/:sBIOGlIG3dBTZYScZqf7DI/L

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @logsdillabot)

C2

5.42.65.63:14707

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f2187917f7e2c764467787dbe25c4e52d646c31c5eaa76b8b430ded9e75c0063.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections