General

  • Target

    da5d8392edf387ecc241af19b05bb362337fa198285699a0f04edac6a7f04f5c

  • Size

    361KB

  • MD5

    e3c74748553336a93fdb60ab7e8324c9

  • SHA1

    ed9fc39a9c1624155a06c5ab8c28107d81390791

  • SHA256

    da5d8392edf387ecc241af19b05bb362337fa198285699a0f04edac6a7f04f5c

  • SHA512

    6cd4fca8a228de23fbb6cfa9f0d0bc5a2c77101d9af70ccab4b96e0f17bc3de13175522c4496d4bf0e2dc551098347898e7119c45a1a30793fa73f84764daca4

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • da5d8392edf387ecc241af19b05bb362337fa198285699a0f04edac6a7f04f5c
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections