General

  • Target

    324dfdbd80691b2e057948f06b570580594070ceeca3acc6fe064fa6a59e36ae

  • Size

    362KB

  • MD5

    ac210f044d8b21263606938524aa4515

  • SHA1

    83b0c640a2861eda38aff9c8d8dbe284038ec365

  • SHA256

    324dfdbd80691b2e057948f06b570580594070ceeca3acc6fe064fa6a59e36ae

  • SHA512

    2eb761ba199059a0bf69687144ed88703dd044b00e49d3d42948cbc8de0075435da128c265378b6dde6cbbab003c5cfb92038aa2b012d8ab43fde38873d1d785

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 324dfdbd80691b2e057948f06b570580594070ceeca3acc6fe064fa6a59e36ae
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections