General

  • Target

    d5f7f12352ed168c24e26f025be641e96965ea576a3a8ce001c42b1504ac5847

  • Size

    360KB

  • MD5

    9c1620dd814e896dda929eac288237bf

  • SHA1

    fc970b80a06aacb121a0f780d44001d42f2b5f01

  • SHA256

    d5f7f12352ed168c24e26f025be641e96965ea576a3a8ce001c42b1504ac5847

  • SHA512

    7e33667351ed1652bcdb313a06a63d6790e1a2fbe8597492a5f33b51dde720fa408d736b5fcf68ac5f52b0a5a741f3e1141a9c2cf7244ee05499712041511032

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • d5f7f12352ed168c24e26f025be641e96965ea576a3a8ce001c42b1504ac5847
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections