General

  • Target

    file.exe

  • Size

    137KB

  • MD5

    02c08edd2f432e82b86813b6887aa3bc

  • SHA1

    85d05a64693e1474c2a5fbfbb81d73349f918767

  • SHA256

    af69bc23d309a81d8ad7221c8e7e261f4e237df0409f42e3eab60cf1662db352

  • SHA512

    fb4dbd31220bedac703fe81ae203bea1c7a4f8805f6251f08d0465f4c088392d1ca43e7b2f534c1b01a47ab5ddd2fa66a5aad5b7665ea0149f6a3268d639fe08

  • SSDEEP

    3072:bYO/ZMTF9R4vIwr0TpMscjrrrrCyMVtDFVyRXFth7SS8q:bYMZMB9R4vIrdMsctWKBbh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

nam6.6

C2

103.89.90.61:34589

Attributes
  • auth_value

    38f13d5bc154fd8f2e1c4bdc90901840

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • file.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections