General

  • Target

    9ceb6841bfbc581c1400438f3ddb312f.bin

  • Size

    145KB

  • MD5

    9ceb6841bfbc581c1400438f3ddb312f

  • SHA1

    f687c068d40941e67802ed3d35bb80d6e584eae9

  • SHA256

    6411bb7108057e29aac4318870a5df4f08be2a9c1bfe038d5ea2159684c30039

  • SHA512

    e0e4eae1ad6f4d42833ae9524b460c000d783ed863c9ac2d032063353e1c260ae8046804c26456d2025b1dd16320e99751e278c2db14f84ea219adfeec4a6d98

  • SSDEEP

    3072:vV+m5cVQmRSx9WCEkEhPW67V8BjVhtZN8e8ht:vj4oihwlVht3

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

diza

C2

185.161.248.37:4138

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9ceb6841bfbc581c1400438f3ddb312f.bin
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections