General

  • Target

    ac1906fa0c648d42c3e1b0c7b70b0e7c0c68888d90dc48c81b225f0932cdb258

  • Size

    112KB

  • MD5

    952abab48bb5bf1cf5f8fc585af985c4

  • SHA1

    bab0ddca75b73a8ccb7f24f4abb1e22d67bec7d4

  • SHA256

    ac1906fa0c648d42c3e1b0c7b70b0e7c0c68888d90dc48c81b225f0932cdb258

  • SHA512

    259b01ce8950e9a4f9c2f24525515e7b61e904090c8d499f40c0430b7af5ca3ef533ed5fa84899c50c0c19087409db47c2e72eb7ac2b6aa98a4eb7b43d56573b

  • SSDEEP

    3072:hcvFBACYCpiTI/PG/bbd1HkQcJMsDUha4EASN01i04:hcveo6bdJ9cZUha4jSoJ4

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

paint

C2

193.233.193.0:4633

Attributes
  • auth_value

    70b295da5ec4f38705304ce3bcd32753

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • ac1906fa0c648d42c3e1b0c7b70b0e7c0c68888d90dc48c81b225f0932cdb258
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections