General

  • Target

    18b5d21ec28026c9c4fd7880e4a06c096461c01788652fd694de4ff8e1ab3a3a

  • Size

    364KB

  • MD5

    7405f53d3676af7778d01560ab341b0b

  • SHA1

    326f6e304639da7cddab183371284b7ace4355b1

  • SHA256

    18b5d21ec28026c9c4fd7880e4a06c096461c01788652fd694de4ff8e1ab3a3a

  • SHA512

    52d0245c102f2e7c6a0d8008a92c958ae42d3893aa84cb9d71c6045363a5952be266e77b83e7eb577277a1ebcca43cd1b9f191a464bb25619642bf0cd6d6a763

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 18b5d21ec28026c9c4fd7880e4a06c096461c01788652fd694de4ff8e1ab3a3a
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections