General

  • Target

    5db81d5b120864b4781a6c6f8f8d9b39c410ca66c0eb798625832f4b8ce9166d

  • Size

    364KB

  • MD5

    3cb7344e67b638d34045631fdb0388e7

  • SHA1

    b9a4ece755bc4bd111bbb60df58e60ab288089fb

  • SHA256

    5db81d5b120864b4781a6c6f8f8d9b39c410ca66c0eb798625832f4b8ce9166d

  • SHA512

    ec3f0e14ed63a6aef3e4cf0ce71ef14652c846c89189844bf2bb69df9f9117499694209187b42defa7c5d2d01577f1ad582f6dbf1c430238c5886d68ce4bd2b5

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 5db81d5b120864b4781a6c6f8f8d9b39c410ca66c0eb798625832f4b8ce9166d
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections