General

  • Target

    bc023937d9608797a84e64d9bf4dfd86.exe

  • Size

    145KB

  • MD5

    bc023937d9608797a84e64d9bf4dfd86

  • SHA1

    daf0a0993de9d432c1b2fe6b464070aef1fe87b3

  • SHA256

    b28d0fe10b239ce201001185b899dc71f6d2c211283b11b66252e529b4d2dc7d

  • SHA512

    c1d76847b0f9390f99f99cf9d5b3e221052c6093b69d9cf40b18adfececd58735f9ab6fa7727b548e7253c540b128b48143840d7c76c66cfd989b5c1fd461f23

  • SSDEEP

    3072:VV+m5cVQmRSxy4ej5Xvebx2VDhcZG8e8hh:Vj4t52b2Dhcc

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

svhot

C2

148.163.119.55:1294

Attributes
  • auth_value

    ce2de638da2779ace0221aac42f04204

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bc023937d9608797a84e64d9bf4dfd86.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections