General

  • Target

    411794941207b822fb35aeb8596f10876f9fe844e9213e940973553ca87a0664

  • Size

    364KB

  • MD5

    4dddbe52c2f9aaaab82ab640ab921784

  • SHA1

    f4a53a4618bb443842d741c79f747b8dcb4be6c2

  • SHA256

    411794941207b822fb35aeb8596f10876f9fe844e9213e940973553ca87a0664

  • SHA512

    24994aff2ea51509cd25c798865078140b81abd8af858e43055e3f288589d940ea57efdb8dfbc75d63e64f1ec0da3606aafdae3c975fa219086ccd78e13b0652

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 411794941207b822fb35aeb8596f10876f9fe844e9213e940973553ca87a0664
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections