General

  • Target

    aa55092d9561cf7613f7729bc9b98c933104ac1639bf1d1c02fedf47e6004be4

  • Size

    362KB

  • MD5

    954b53f9571afe644f9b4a17839c7123

  • SHA1

    7313681bdb358cdd6813234007d6180dbf8e10c3

  • SHA256

    aa55092d9561cf7613f7729bc9b98c933104ac1639bf1d1c02fedf47e6004be4

  • SHA512

    675d30ab8964a0345de84e04b2033c847aad8afd862a3135dfdb012616b643795c8fe66715fa9bebd991fe1915b79bc565a039259c29690c67a721aff6a99906

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • aa55092d9561cf7613f7729bc9b98c933104ac1639bf1d1c02fedf47e6004be4
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections