General

  • Target

    4e6ff3e6c8d964506675df9770bb65dbb6fdc126f9a2929400c7abe1734c27ac

  • Size

    361KB

  • MD5

    e82937c5039d1087767883ef4da42896

  • SHA1

    fc9d4795eb81effb1cca088b11f661b3e8842e73

  • SHA256

    4e6ff3e6c8d964506675df9770bb65dbb6fdc126f9a2929400c7abe1734c27ac

  • SHA512

    b2ee281dc22d7440d56122d8c26ff21e7b192ee7c0584a773380c02416dd24a839a1717d60bef32b24029468e9e952e5367926ce30958ff449a22b2d2937efc3

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 4e6ff3e6c8d964506675df9770bb65dbb6fdc126f9a2929400c7abe1734c27ac
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections