General

  • Target

    30eeb6c732a7e37cbfff0148d2c2457229fb6ef36feb0abb99e2afbfed0d1257.zip

  • Size

    50KB

  • MD5

    b5cfeb081d8419ae58e8284b6d936a19

  • SHA1

    b925c1a2ca901618253fd3676a4c2627529e851b

  • SHA256

    d013fe79c582b6d632ff389d0ceb1425bccfd71415d3be767a69984a0aaee525

  • SHA512

    5685ce45674d9c278abf60c5013f1dab8d98c54fd82afe08258c42acc6bb74c6870540ac138b08bd3d15740d2149f8aa2d3b53520481df7121f23eeed8176eec

  • SSDEEP

    1536:+LaDzt2gcUJf6CKwYfzhm78XSKzVt7XNBpPU00SFA:Ht7lxYfz0AjXNX8PSFA

Score
10/10

Malware Config

Extracted

Family

redline

C2

82.115.223.190:21927

Attributes
  • auth_value

    25566e143199c0836b0e51542c425f6e

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 30eeb6c732a7e37cbfff0148d2c2457229fb6ef36feb0abb99e2afbfed0d1257.zip
    .zip

    Password: infected

  • 30eeb6c732a7e37cbfff0148d2c2457229fb6ef36feb0abb99e2afbfed0d1257.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections