General

  • Target

    4fecd7b52c83fcf810f65b4c0b4a726306effb83a342145def42e06cc64c839d

  • Size

    362KB

  • MD5

    2b5d80fde587e357f53b1bfdeb5b8b46

  • SHA1

    677679e945cfd5c0f73a7db7cd1fce76c36f1823

  • SHA256

    4fecd7b52c83fcf810f65b4c0b4a726306effb83a342145def42e06cc64c839d

  • SHA512

    a45250478d71265219d654a5de6a648f91d06a3ea5e8a4709df82089989ef824508a2f9f2d8be3d816a2312356d3c525878bb24a29dada92b941ec15b47a43c1

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 4fecd7b52c83fcf810f65b4c0b4a726306effb83a342145def42e06cc64c839d
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections