General

  • Target

    0e38249d99c020aeb2d7210876baeda7b9a5054e7e0ac164e7c4c53ac5bb7815

  • Size

    363KB

  • MD5

    f4a9a4e0a57c2f6b0047047c22535df2

  • SHA1

    bddd6477644c25718ee33737de71f79cdf3a25de

  • SHA256

    0e38249d99c020aeb2d7210876baeda7b9a5054e7e0ac164e7c4c53ac5bb7815

  • SHA512

    d21b8d5961a6cb01fe275865f3248a6e9fdbcf974bc474422b8ff872633455d1e8244c3cc3ee317f27fa50422f5fcbccdd58db526c230fa9d3a9ae9519925698

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 0e38249d99c020aeb2d7210876baeda7b9a5054e7e0ac164e7c4c53ac5bb7815
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections