General

  • Target

    ebd4805fab5b4ee5a235c0bbba08b26db19912b9b7c0ab4a0261ec8c259be6bd

  • Size

    362KB

  • MD5

    4ff3adf03bb8e78c0fb98576b5874dea

  • SHA1

    c673283adef574f6165ef5f630349d3e9c5700f0

  • SHA256

    ebd4805fab5b4ee5a235c0bbba08b26db19912b9b7c0ab4a0261ec8c259be6bd

  • SHA512

    8fca2961ae3a59de24ba8a53e53dc12fe0ea052a5b23ffb90e14efdfd09ab950a11dece528929f2ced2af1179ce2d8447d75dac95d0d39005115944854da019b

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • ebd4805fab5b4ee5a235c0bbba08b26db19912b9b7c0ab4a0261ec8c259be6bd
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections