General

  • Target

    5d509bcea349a4cd963aaa4ba7224035678afcb060dd4c99005f833a26d4db7d

  • Size

    361KB

  • MD5

    59d1c2b1c1c999f4d032f67fa12c4e15

  • SHA1

    1b4ee03a119bdfd0e6935fa8bc5e0b50ce449210

  • SHA256

    5d509bcea349a4cd963aaa4ba7224035678afcb060dd4c99005f833a26d4db7d

  • SHA512

    a43b924ffd55d43010e5aebb99656208c974a0b00b8b96d93816cf078e9dba5fe2d3168f5c0c343c866a061f7de7679c41a8491943fae0b9eb691281ecba78d2

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 5d509bcea349a4cd963aaa4ba7224035678afcb060dd4c99005f833a26d4db7d
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections