Overview

overview

10

Static

static

10

69cb3e3549...55.exe

windows7-x64

10

69cb3e3549...55.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    69cb3e3549027c07afaa4a51a9f113fc846b2d818add819a1b85f1071414e755.zip

  • Size

    39KB

  • MD5

    8b1333de3b702fb423890e973522fba5

  • SHA1

    e8dae29eaa5f8da8835330f372e738664103e9d1

  • SHA256

    629d7b46ad42070495ca8628e294b253c92cb69dca8b2110c38a7b5fc7a6e82e

  • SHA512

    9f9629e774e4e1e70da720e9f5a2d34c0e3473ff2468cfb4699031bc4c933d5a66e9f91abd275dddfd302b6e8e433a42cd460be536be0a0dad3c1898fd407e8c

  • SSDEEP

    768:yYuQ+nyAM6DKFaL/UiUECG7vJGOWDQnAQQuj/kw4rlEV2YzD1:yYuQAM6DK/ib7JbPQuTkw4hEV2Y9

Score
10/10
@xiiiolympusredline

Malware Config

Extracted

Family

redline

Botnet

@XIIIOLYMPUS

C2

xiiiolympus.zapto.org:2000

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline

Files

  • 69cb3e3549027c07afaa4a51a9f113fc846b2d818add819a1b85f1071414e755.zip
    .zip

    Password: infected

  • 69cb3e3549027c07afaa4a51a9f113fc846b2d818add819a1b85f1071414e755
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections