General

  • Target

    a21894cb55787da39f9d3b8eb25be45048ca1a3b13054541a0f01d36e7e50f12

  • Size

    361KB

  • MD5

    60d1faf0aa41c13f00c4c2e71cbe1231

  • SHA1

    de6ec6a5efa3ed6dd1decae56a370633fb5673f4

  • SHA256

    a21894cb55787da39f9d3b8eb25be45048ca1a3b13054541a0f01d36e7e50f12

  • SHA512

    f4454cac651f65613e18af16cde02f1ba3686003f971e61ae0d3789de48b6a17ef68c439116a76f8ba7210136239593cc224aa20520cce196b059f89c4548e13

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • a21894cb55787da39f9d3b8eb25be45048ca1a3b13054541a0f01d36e7e50f12
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections