General

  • Target

    407995d6549a2357566525ca86a8853782cf68bae15a62280f2ecd0ee1569aa1

  • Size

    361KB

  • MD5

    f5d70c8a256515e62e27d785cffd9687

  • SHA1

    84f66b37ef7cf515dea83dd61dc955a9a86c34e5

  • SHA256

    407995d6549a2357566525ca86a8853782cf68bae15a62280f2ecd0ee1569aa1

  • SHA512

    a7a9ae2dcc04899e114aabe476bb47f005a6d55d5295745477902d20d40f6720a50b8dc329e28662219676f529d53b9ed68a3ec34d7ba3622dbca96e6e3f50b5

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 407995d6549a2357566525ca86a8853782cf68bae15a62280f2ecd0ee1569aa1
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections