General

  • Target

    l4606507.exe

  • Size

    145KB

  • MD5

    fc3a6d0a80360113d4d09808822406e3

  • SHA1

    6fb33fc6f7d178d3ecdffd542a2c2cb4bda030cc

  • SHA256

    24703bcc37db6da6b55b4496965c4e68ac1b46b79a1f6e9233baafee450a637d

  • SHA512

    973aa35fd953f270347d341e80aba8d057ac7d8f03bac0173972b56ce825ffde930703714d5eb4b4357ef67bafb1f903ab1dc22c28516c5e79f5c89489710fa3

  • SSDEEP

    3072:yV+m5crQmRSR38/OxTH25OjNkphoZR8e8h5:yjCZMgekphoL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

disa

C2

83.97.73.122:19062

Attributes
  • auth_value

    93f8c4ca7000e3381dd4b6b86434de05

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • l4606507.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections