General

  • Target

    delivery.exe

  • Size

    168KB

  • MD5

    381edc28bb9683f575cdf6e10648647a

  • SHA1

    63de4d13195a74131301679b47614422608d14ea

  • SHA256

    72f689974f397e95426f561c8ded3348e839c9dad066b1b1fb2f813d85be97a6

  • SHA512

    b5bddb3b5477d279da369803cd9c657c5a5d6ac427db93469d981797779183169a01827a5a46349d84e4412de7ff3e3c303f5d9bd14701703d0c11db64e50e45

  • SSDEEP

    3072:RobLcI7FI+ZHU8qVyo6aYFDHiFg8e8h0:Rov/7SuvtFDHiFg

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

delivery

C2

45.9.74.117:45245

Attributes
  • auth_value

    7bca09417c59ffabbe35b833dac5a9b7

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • delivery.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections