General

  • Target

    506db7da868addb99b05eb1963a7eaf521db8cb390222a0a59ba83ba9e500fc3

  • Size

    362KB

  • MD5

    ef45014c88455e9e5b5e95ae29375a3f

  • SHA1

    aa37d154dcb6f60e4a52ed8d1324610a0fecad43

  • SHA256

    506db7da868addb99b05eb1963a7eaf521db8cb390222a0a59ba83ba9e500fc3

  • SHA512

    03b5f9159c04282743c05abba2a79b26c7b2da4ada149bc8bebfc8632364b03e2791eade7254d318cc01bbe11d5c4434ea2a9522e544054606fa88b8d10526c5

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 506db7da868addb99b05eb1963a7eaf521db8cb390222a0a59ba83ba9e500fc3
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections