General

  • Target

    d9fa597acbe6d350eec3d832d734884bca8bf8a52a2dfa92217f634e210bd949

  • Size

    363KB

  • MD5

    ee8a107af14b3186ab7aab00a5d5b04e

  • SHA1

    4b6893c6c72e15ae43b2cf4bdad23db7554224fe

  • SHA256

    d9fa597acbe6d350eec3d832d734884bca8bf8a52a2dfa92217f634e210bd949

  • SHA512

    b795af4d473a20c861c08412281296f8171d79f68810737c5debe49a27cb0936ea4263cca3debab3d6524d6301b5a7dfc47fa757bfc2a87800bc30021c96bd97

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • d9fa597acbe6d350eec3d832d734884bca8bf8a52a2dfa92217f634e210bd949
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections