General

  • Target

    18b1c855f3f9e916e67ff5d06c20a6ce3904ff4c013c8d443d2de74de8d35911

  • Size

    363KB

  • MD5

    6f9b7548339f415335a5176422297c3f

  • SHA1

    f2d126f9bb17807ef8159cccab69bd435750b6fa

  • SHA256

    18b1c855f3f9e916e67ff5d06c20a6ce3904ff4c013c8d443d2de74de8d35911

  • SHA512

    01dcf5c6e683cb8fd11417dac3fb58f19c22239ef19c2feaf293644961c0bfd8255f525be6ae95601775648551831b7c02a15ade0b92032886a80a8cf8dc1e2f

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 18b1c855f3f9e916e67ff5d06c20a6ce3904ff4c013c8d443d2de74de8d35911
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections