General

  • Target

    5b5786774d8d9d89f1c93b4148bc5055907426448cce6e056c01c39bf68fc895

  • Size

    362KB

  • MD5

    da9d2b08f2eb63950b0f4bb67eb81100

  • SHA1

    ffebf85a3e28a917be7c55f59dc5e83a78e26f06

  • SHA256

    5b5786774d8d9d89f1c93b4148bc5055907426448cce6e056c01c39bf68fc895

  • SHA512

    ffcfb8fd9442a3991501ea342c74e9f271d52e5b3354fb165304087f908daba1c2db92c876b3fd2d830b6826ee642bd346f0266444ba4fe3a22a7e41b4c73df1

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 5b5786774d8d9d89f1c93b4148bc5055907426448cce6e056c01c39bf68fc895
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections