General

  • Target

    ef5368d754d467f1221eb0dd1c41ae900f0dc174f6033df95e8e604609035fa3

  • Size

    362KB

  • MD5

    d3b6a735ea1beef82d27521f691abff7

  • SHA1

    dac5c2392c94855370e8c373c94726122e7a0cfa

  • SHA256

    ef5368d754d467f1221eb0dd1c41ae900f0dc174f6033df95e8e604609035fa3

  • SHA512

    9685ec473ca9ad6fa1a8899b4611c1781f6e3b341896695d123f8007670ec758b21c0af7cb86ec441be8c54f18186f5960cd5781e340cf07ae500372dc6549d8

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • ef5368d754d467f1221eb0dd1c41ae900f0dc174f6033df95e8e604609035fa3
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections