General

  • Target

    5b49fc7e993f2467515e587ad0ce7c737241ac61fb6d641a8344ddd5a774bdf8

  • Size

    361KB

  • MD5

    e1b6b5aa84abe816c1cb9d1705f7331a

  • SHA1

    6db02a985a7895efa024aa9dd2d9ae08a1f7a206

  • SHA256

    5b49fc7e993f2467515e587ad0ce7c737241ac61fb6d641a8344ddd5a774bdf8

  • SHA512

    b8cd79ceaab5dd01dee446df5fef41252fb7ea63e47cf4a89c8bfd8ab51b5ac7150dd71e04a68c6bf5f457bb3694a5689784626d824c743f3d70be9d2c124464

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 5b49fc7e993f2467515e587ad0ce7c737241ac61fb6d641a8344ddd5a774bdf8
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections