General

  • Target

    eed1566f826319f288df1d04c73d60898f091cd4b12ac2c1ebb7deb42ac6691c.zip

  • Size

    64KB

  • MD5

    7b47d3bdcae0165541078bc1c049e795

  • SHA1

    956d994f6b81ff4f51af4968ab50c57a2919664c

  • SHA256

    0e01c6b23cc51552d281fea7c2459b053f9db7052144f4bcf666a6b43e915649

  • SHA512

    cefa4bca2b36b3c6a5082dbbea9d5c9bf400e5b27207026b6667329f424d0657b3e706a973160ba7b0369e294c828aa64384834ed258473c60acbb439a2fbbf1

  • SSDEEP

    1536:gTm4ZA96B31vIsJWJc5ug/ypAGaVMzaMttXENNy1q9sJDicqB2:gTmW3N3WJ8ugHMuSFENo1q92WcqB2

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

misfa

C2

217.196.96.101:4132

Attributes
  • auth_value

    be2e6d9f1a5e54a81340947b20e561c1

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eed1566f826319f288df1d04c73d60898f091cd4b12ac2c1ebb7deb42ac6691c.zip
    .zip

    Password: infected

  • eed1566f826319f288df1d04c73d60898f091cd4b12ac2c1ebb7deb42ac6691c
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections