General
-
Target
a591d3d035cf90395ad1078a415a46b5b44dd813496291b702fe36cfb22dee36_dump.exe
-
Size
95KB
-
MD5
6bd0efca19c8a21373008dd422aaf39b
-
SHA1
c81af8840eccf6a7b5354046ace6e1a4a77b487f
-
SHA256
6d62a0958a7574ba2ad7dce6199bbd1520afd23fea2183dc031b234e5fc66698
-
SHA512
6ffd237cd396f420bd4d7c7fe2fd74bc23b47c410f576c8c1cb57bd70a4285bece186318f7fa4b787eb077cf16c1b1d8cf4453a7d8977232d28160d82187857c
-
SSDEEP
1536:5qs+OqJGlbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2GteulgS6p8l:XRuOYj+zi0ZbYe1g0ujyzd+8
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
wordfile
C2
185.38.142.10:7474
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
SectopRAT payload 1 IoCs
-
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a591d3d035cf90395ad1078a415a46b5b44dd813496291b702fe36cfb22dee36_dump.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections