General

  • Target

    Implosions.exe

  • Size

    96KB

  • MD5

    ab44370999b18fdb360152c7610de2ed

  • SHA1

    89864bb3e2affe27936938e63fa6f2fdf1a2daf5

  • SHA256

    e5f1e5a7efab4b225fca60b34b3843bf49b26ace3855ee8f824b6cb0d183b1f2

  • SHA512

    1ab5bf39d282b92e81941ada51dcbe97deb9c9588a710a9e91f9da6589b0e34e2f473e5f9577ae5c91abe53b32bf35d3a9bdd8a611391a55a76328ea2b3f002f

  • SSDEEP

    1536:t907js8rRwlbG6jejoigIeyYLB3UicrMFW08UAiqumbfcxv0ujXyyed1etmulgSt:Qci2YeciRWjUA57C0ujyzdLbG

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

@badtripwork

C2

185.206.213.12:26906

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • Implosions.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections