General

  • Target

    8ff8e2c50f6a02e935b0459a186e2471b06fc89e0069ac4357a052a2c9298aa6

  • Size

    362KB

  • MD5

    21e2152a732ea8f33595c92e1efdb243

  • SHA1

    a06475d60a422900760154c525a13b1d84726562

  • SHA256

    8ff8e2c50f6a02e935b0459a186e2471b06fc89e0069ac4357a052a2c9298aa6

  • SHA512

    42369a880cb84766755e722df42c08235ab219de866d7698722226567c65c185e750fa122d59e71248018ce919ceb9e017f7bf9badf57cf3380babb1662b672c

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 8ff8e2c50f6a02e935b0459a186e2471b06fc89e0069ac4357a052a2c9298aa6
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections