General

  • Target

    61d50762f54f02f1c8e97eb01fdbdc847d3efa98a297c441c169785c51828c34.exe

  • Size

    286KB

  • MD5

    047eabae5b8b2d8c7a599654f23a5269

  • SHA1

    646702ded1fdee06275edf994a6f3f004f1050a9

  • SHA256

    61d50762f54f02f1c8e97eb01fdbdc847d3efa98a297c441c169785c51828c34

  • SHA512

    00c5909f556f142c3b2227223b6fbb1d864882e0027bbb314b1753ded9ff1163c7105c385e1cfb56757e6757e3f0b9657bfd581ee2a1b93d05487155599bd218

  • SSDEEP

    3072:WqFFrqwIOGB/y18mxX3TkHBeFZsz494hdHr2TZ6hHgwcZqf7D34KbBOx:tBIOGwSB28dL2TZilcZqf7DI

Malware Config

Extracted

Family

redline

Botnet

R83-20240628_01

C2

38.92.40.91:11170

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 61d50762f54f02f1c8e97eb01fdbdc847d3efa98a297c441c169785c51828c34.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections