General

  • Target

    18a28fa4959dd30b95a18a0e776f8a95f7bee73743168488b388bc5693670a3e

  • Size

    362KB

  • MD5

    37edf20d8e8c8ea86be6da11cee8bafc

  • SHA1

    8f874973f3898e073f4795078e2fd78021140b09

  • SHA256

    18a28fa4959dd30b95a18a0e776f8a95f7bee73743168488b388bc5693670a3e

  • SHA512

    9fb4455c2c90e7591bd2ff932e5f04c5e55ba121ef2f87b15d0f7317c047ab6949174649aaafabe2a568c7e101c2e5e39d5e8c7dd11bce14ad4dbef3bfadd156

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 18a28fa4959dd30b95a18a0e776f8a95f7bee73743168488b388bc5693670a3e
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections