General

  • Target

    b15c97e01be8722183f789dc2bb51ca9.exe

  • Size

    168KB

  • MD5

    b15c97e01be8722183f789dc2bb51ca9

  • SHA1

    8afbfd5de8f716b2d6e8ee39aec7530b852b7a88

  • SHA256

    6f9dc3831e0fb42dba60a53d410f79d7976e10b38d32f0a641b0ae57bba52636

  • SHA512

    b81f0c53d300fad82fac7eafbbc136f80cf56f7652334cb9b673bd336287cc7ca87543dd4463c06324d23a04b83bad07f5e5348512ed12fa21564af3a864cb57

  • SSDEEP

    3072:cFqcmyyMLQ39eLqVCmaWZTYoIZP08e8hz:cFSyyQ8QLYZTYoIZP0

Malware Config

Extracted

Family

redline

Botnet

MillionsDollars10000000

C2

88.99.184.104:2449

Attributes
  • auth_value

    af3383761df5f19029e7a92c1acf53e4

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b15c97e01be8722183f789dc2bb51ca9.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections