General

  • Target

    6e9067c74aff7d46bfda3b99262e867d6335273e3e923f3eb8ab349a865a2580

  • Size

    105KB

  • MD5

    539d03c432f7722754954dce80d0bc71

  • SHA1

    154b8be08af591644454a18fc23732cf0e791e66

  • SHA256

    6e9067c74aff7d46bfda3b99262e867d6335273e3e923f3eb8ab349a865a2580

  • SHA512

    e98fb031dab6bca84ef9458e6583835dcfa1309bb3fca191a5c756bdd8d5db256e1c2f25e7ce2f346031bd5ffa46d6b37f6584f724eadc3bd8d06f2ccd41c6cf

  • SSDEEP

    3072:G+uncNgiV5nchxlvN2sGa/4kFDeDBLrcPKzrF3KOK4s+7K4sO4H4jooQ4wym5QcS:UYsAOh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

One

C2

135.181.11.39:33468

Attributes
  • auth_value

    58d469dbb7a5d16d937493ee8106990d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6e9067c74aff7d46bfda3b99262e867d6335273e3e923f3eb8ab349a865a2580
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections