General

  • Target

    04885be493e9575bd8568e40fde320b9297f42a03f1e3175ede14a19c9380ea8

  • Size

    363KB

  • MD5

    603d7a13b529696ec0bd77a5b3e90d03

  • SHA1

    a973e3281a89cf2a17488fda7457efe5ea2b7434

  • SHA256

    04885be493e9575bd8568e40fde320b9297f42a03f1e3175ede14a19c9380ea8

  • SHA512

    eb4c4dc534570f3c7a3ec0aca3e6534f04b3afae4edc04f33409387d5ffbefdae0ff529a5c833c37137df2b67d680a9f0161d04a0738b96e8cd626b89a6ac187

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 04885be493e9575bd8568e40fde320b9297f42a03f1e3175ede14a19c9380ea8
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections