redline | a591d3d035cf90395ad1078a415a46b5b44dd813496291b702fe36cfb22dee36_dump[.]exe

General

Target

a591d3d035cf90395ad1078a415a46b5b44dd813496291b702fe36cfb22dee36_dump.exe
Size

95KB
MD5

6bd0efca19c8a21373008dd422aaf39b
SHA1

c81af8840eccf6a7b5354046ace6e1a4a77b487f
SHA256

6d62a0958a7574ba2ad7dce6199bbd1520afd23fea2183dc031b234e5fc66698
SHA512

6ffd237cd396f420bd4d7c7fe2fd74bc23b47c410f576c8c1cb57bd70a4285bece186318f7fa4b787eb077cf16c1b1d8cf4453a7d8977232d28160d82187857c
SSDEEP

1536:5qs+OqJGlbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2GteulgS6p8l:XRuOYj+zi0ZbYe1g0ujyzd+8

Score

10^/10

Family

redline

Botnet

wordfile

C2

185.38.142.10:7474

RedLine payload 1 IoCs

Processes:

resource yara_rule

sample family_redline
Redline family
redline
SectopRAT payload 1 IoCs

Processes:

resource yara_rule

sample family_sectoprat
Sectoprat family
sectoprat

resource	yara_rule
sample	family_redline

resource	yara_rule
sample	family_sectoprat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
a591d3d035cf90395ad1078a415a46b5b44dd813496291b702fe36cfb22dee36_dump.exe