General

  • Target

    0dec70e92a48a902d1d2eb5bce9ea42234b34bbf01192.exe

  • Size

    137KB

  • MD5

    e1df9df332863067dafee8ed224714a4

  • SHA1

    ff2fe99860710a59602eb9cce5c14f6f8a537f8a

  • SHA256

    0dec70e92a48a902d1d2eb5bce9ea42234b34bbf01192520c86427895618fc8b

  • SHA512

    243ee22fa5e59462a09773fa0c2d9232017ce39c43189323b6d01a9df96f4e3c91e5f7f7c0db5b1eb3046815fb5d4c0fd9028b24b2441068dc8f6fd7f50aadee

  • SSDEEP

    3072:3YO/ZMTFjLiI4LyJ4HwQBpOVUDFDyRXpheSSUf:3YMZMBjLiIBaQQ10Bph

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

@Fate1337LZT

C2

89.23.100.144:40788

Attributes
  • auth_value

    d5b0c3e4b1aa22b78b0ce7bd07c3acd7

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 0dec70e92a48a902d1d2eb5bce9ea42234b34bbf01192.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections