General

  • Target

    f4806936.exe

  • Size

    145KB

  • MD5

    b4a4af5f93e940418975693f5f0481a8

  • SHA1

    c6a0f46c73d374fb405e5edabbaf1ef8978a8d48

  • SHA256

    346132d2bbab090b3da85452c294d574816b7d2a2a2b66bd5eb8dcffb48b74d6

  • SHA512

    6f122f8449d1e55d2b6e52897ddd7ee345a4ef549051cd32b64ffe862af452d8ffb60197495368b18755f96a94dc498f45bec4bcabb5ea99a10e75b3631baad2

  • SSDEEP

    3072:CV+m5cVQmRSxUV/vz6eBtdpPh3ZQ8e8hH:Cj4FnhJh3a

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

doma

C2

185.161.248.75:4132

Attributes
  • auth_value

    8be53af7f78567706928d0abef953ef4

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f4806936.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections