General

  • Target

    c30dc756798d26d648dd35a39a674b9ff9ccaec234cf92261bfc55b73c4a0192

  • Size

    363KB

  • MD5

    052ec026e4c25b4e4940542fd250cc51

  • SHA1

    f95d944e51d9d6d05afa63d1c5f150e1a28fafab

  • SHA256

    c30dc756798d26d648dd35a39a674b9ff9ccaec234cf92261bfc55b73c4a0192

  • SHA512

    af76328b92ee5deb99096a3612a6e8b954e8e6ad2f498b76a6673ed7bc6e81a924b2b3229d76e43f6a7a1d68accadd65c6ed29bb09988109e0a1fccc50434fa8

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • c30dc756798d26d648dd35a39a674b9ff9ccaec234cf92261bfc55b73c4a0192
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections