General

  • Target

    c9c76636a5adb72c9c468821a863f18db8c1e6e68f1287a21955e6df565ce4de

  • Size

    363KB

  • MD5

    9fa6fa49f896f2fc94347151241ea2b3

  • SHA1

    b3c34e529a06cc16a0fc2f72d9ae06fac20a3591

  • SHA256

    c9c76636a5adb72c9c468821a863f18db8c1e6e68f1287a21955e6df565ce4de

  • SHA512

    b954c2679b4145a03c26a68786e46f1ebdcb2a612327c4b7fa5f7105641338b81231d0fab58fffd993a25318313482bbd8d5659cce37c5ec7e9b0126f3cab269

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • c9c76636a5adb72c9c468821a863f18db8c1e6e68f1287a21955e6df565ce4de
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections