General

  • Target

    8ce20dc175b182021d0b2287de9a5d68869a72428a423ca1f125fd5254f588f9

  • Size

    363KB

  • MD5

    9f304cca3d2c9419933b81f240606daa

  • SHA1

    80bc12c24a91346ecc08d45ddea7a89bb1daeded

  • SHA256

    8ce20dc175b182021d0b2287de9a5d68869a72428a423ca1f125fd5254f588f9

  • SHA512

    c028bb6eb5ef7cb1381a1164656c006b99cb36f1c07786ccd6e7f80bdf5f5a8dffba7d9cc383309d22dbfd807e303f59cb19aeae30c6a8b6887f99991f9252ba

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 8ce20dc175b182021d0b2287de9a5d68869a72428a423ca1f125fd5254f588f9
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections