General

  • Target

    144a3d2f4382a85f955db07e19521ef076f88b5c791a763adccc34823e3f00c7

  • Size

    362KB

  • MD5

    104321d3f79119535384253ee4b556d7

  • SHA1

    c27e1493ae08d983553878fb791ed595b3ac7008

  • SHA256

    144a3d2f4382a85f955db07e19521ef076f88b5c791a763adccc34823e3f00c7

  • SHA512

    e8fbebf2b8cf3eb9837be8014b850b756abb1c1f48fe131ac07340cbde14acf33a4050544a49220c335eb492b0d06657ea19340271c9c15a718ed5b5b166060e

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 144a3d2f4382a85f955db07e19521ef076f88b5c791a763adccc34823e3f00c7
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections