General

  • Target

    af384757be68b8681761d41be64abbe125715f2fcc6f49a34a9a846537f074d8

  • Size

    361KB

  • MD5

    3fe599b1cac06451b8661f86c24e8101

  • SHA1

    ad683a8b7aadf52836b7c385f2672250b7ae538d

  • SHA256

    af384757be68b8681761d41be64abbe125715f2fcc6f49a34a9a846537f074d8

  • SHA512

    b7fef416bcfa7fd0c6588d986223c8d7e0a79e9fa9258637645a5e7ba5edb78878b470852f051addc2d8f852b15d1b2a369cd2903b6123d6b5d6279627cfb1cc

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • af384757be68b8681761d41be64abbe125715f2fcc6f49a34a9a846537f074d8
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections