General

  • Target

    5b04df1fc7391d27ff73db6cc2af6d9a9bbe38fc8c010802232798f68ec10ed6

  • Size

    364KB

  • MD5

    aa0aee5cb0371d4b0a563e4e692371ed

  • SHA1

    4697c599db2b67642464c2e2aeb1eed698123b2e

  • SHA256

    5b04df1fc7391d27ff73db6cc2af6d9a9bbe38fc8c010802232798f68ec10ed6

  • SHA512

    79cf56263988878ae1278197e26a7bcd2a816e6d244d1509176910a67a9e9328abc8a0244cd4d4dff92a3a05ef4bbc13d50e728fa9862d38905249774195eb3a

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 5b04df1fc7391d27ff73db6cc2af6d9a9bbe38fc8c010802232798f68ec10ed6
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections