General

  • Target

    dc9d09314c0e04aca5ee0b5ff4e0e654961a7a9c42ebe98b146fcc0dbcac1785

  • Size

    137KB

  • MD5

    bcd28aedd4ce2e304e7edd98ca3cfcb2

  • SHA1

    baed657cbf38cf9debf923e7036acdcf99165bc0

  • SHA256

    dc9d09314c0e04aca5ee0b5ff4e0e654961a7a9c42ebe98b146fcc0dbcac1785

  • SHA512

    c15cd5d7105f506aa342b4178392da5f666c5ec0cc1e6145650dcc51ce0e67654d3e54a6e79d33220678fd557ab8070b84e8e1e312afebc1c7395eab2bf62064

  • SSDEEP

    3072:fYO/ZMTFNp+Oo+7O4saR9VpBJ/zWFbyRXchnSSc9:fYMZMBNpdoTjs/z9Bch

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mao

C2

77.73.134.251:4691

Attributes
  • auth_value

    a06897b11f5e600c4479f1b544acc337

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • dc9d09314c0e04aca5ee0b5ff4e0e654961a7a9c42ebe98b146fcc0dbcac1785
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections