General

  • Target

    Sigmanly_9ff724fb4c48b8da74c98b621cddff271942047617f04443ba3b1ed0b8f70d4d

  • Size

    300KB

  • MD5

    d128291a5d60b17b22dccbedd7b711fd

  • SHA1

    7ee96b938de052f70026664b8a4f3be6a80a6596

  • SHA256

    9ff724fb4c48b8da74c98b621cddff271942047617f04443ba3b1ed0b8f70d4d

  • SHA512

    9c95023be796fbd58a5fee7a02161be17612b008609531043bfe44d25c7aca7c2c62e2d0f64d6cb1c5efda6089c826618d5aa48cbe171a0025e6356d66a25a5c

  • SSDEEP

    3072:6cZqf7D34Np/0+mAUkywpgQEgjpB1fA0PuTVAtkxzy3RseqiOL2bBOA:6cZqf7DIXn7TRB1fA0GTV8kgUL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

Standoff

C2

89.23.101.77:1912

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Sigmanly_9ff724fb4c48b8da74c98b621cddff271942047617f04443ba3b1ed0b8f70d4d
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections