General

  • Target

    ff6387ec2bafcf49afe891b762b63076ae594d9833f19b24cdf38c6e2f2981dd

  • Size

    361KB

  • MD5

    99b94f6ca6d27345c733f219ff86abc8

  • SHA1

    169fb917d0b4153caed940a9e78f74a3dec7e779

  • SHA256

    ff6387ec2bafcf49afe891b762b63076ae594d9833f19b24cdf38c6e2f2981dd

  • SHA512

    3000443b4b795983f8813b4e84ca338010b0d8a77b8c80c2c7f6729d7dd030bb5f38d5785f57938991c7a9303933547eb00cdb5c3a9a496bcc1c5ac37877ca03

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • ff6387ec2bafcf49afe891b762b63076ae594d9833f19b24cdf38c6e2f2981dd
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections