General

  • Target

    5df1f72cb380609ea32dfb492d78ac6b3b05dc697bf43e632db28219bb82856a

  • Size

    360KB

  • MD5

    ce42d786e4aaaa555b3a2010ba0c6f51

  • SHA1

    e620e86c55a016650dd27e742d104a96d0121bc0

  • SHA256

    5df1f72cb380609ea32dfb492d78ac6b3b05dc697bf43e632db28219bb82856a

  • SHA512

    403c5db65c33ba5563a94082452ebb96c419e56fa49ae2cae2a31fc317191b048ec9aca18b2b5b543dc2f6f2dc8d70e44d41d8b8745b747b8e95557da111ea71

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 5df1f72cb380609ea32dfb492d78ac6b3b05dc697bf43e632db28219bb82856a
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections