General

  • Target

    ef3f9655f96ed3dff70351d70d8fd32be0f75b2e6e6e5a4ca287d76683d6a5df

  • Size

    361KB

  • MD5

    3a01b9ac7cb72d4f2470e4244fd7770a

  • SHA1

    c81227d990592b4c53c0fbb9c6d00b9b5c5fa831

  • SHA256

    ef3f9655f96ed3dff70351d70d8fd32be0f75b2e6e6e5a4ca287d76683d6a5df

  • SHA512

    06f903dd0c911d2243feadce0f3e922edcdf13f9d5f654994ba4d48f2081425613b5b04a97af7a042ae5dce0d4f9cddccca533f6ea9610381cc0e061800bc3fc

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • ef3f9655f96ed3dff70351d70d8fd32be0f75b2e6e6e5a4ca287d76683d6a5df
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections