General

  • Target

    file.exe

  • Size

    359KB

  • MD5

    5124802ac956558990524c58a5bec618

  • SHA1

    bad2c7d992f66a4c56ca5e3039276236ed4a5bd8

  • SHA256

    298e683032b37bc892144ba2d05c00fc8d5d1b46c6a575c67140b622ed3532dd

  • SHA512

    85cdc4217a5cdb0eb5f150e1281ce971f77b73fe1415a5a8973bf21c36d70d0f0baa5c72b32d13c79e22f3575546f3e93bf5cc4db64543cc30f2025f0dff177e

  • SSDEEP

    6144:YXTSOAoNsEjZNJl1mBUQrwsE+g7Xd8uwJWjhxvq35BY/jsPM2qrcxJUzwgPWMsby:JolFLl1mBUPp8zJWjhxvq35BY/jsPM2y

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

9

C2

79.110.62.196:26277

Attributes
  • auth_value

    f6ed798484a40acf8b82b3fd3a8ceffa

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • file.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections