General

  • Target

    d16cf9a7b05bedc601e906ae258f9751318a3ff552bff6c684863a60e4be28b7

  • Size

    362KB

  • MD5

    937e2ff15950742e1af26f4677c828c7

  • SHA1

    79d76a8fca5706f3bc74c6ec4700e9353adb4cbd

  • SHA256

    d16cf9a7b05bedc601e906ae258f9751318a3ff552bff6c684863a60e4be28b7

  • SHA512

    f691d9c622588919518216eedd55734c91f863c3c279e2d6f218f37af8cfdae94bf9297b220c9ec5baabe4fa26c1345d3d785b6d73502dc131e4cdd567d1b72c

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • d16cf9a7b05bedc601e906ae258f9751318a3ff552bff6c684863a60e4be28b7
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections