General

  • Target

    3dbd0fff1164843ed2b5d151a89d40d1.exe

  • Size

    127KB

  • MD5

    3dbd0fff1164843ed2b5d151a89d40d1

  • SHA1

    84eab2ed0b7432f391f07c91c8f6dc0fe274c42e

  • SHA256

    65b00004c90c3d177d400cc52e13c20b489903db211fb91b8216e5fb23d86859

  • SHA512

    1bae20180c486028aa477a26a5a67817b8a82e36c395b8b24e9220916269c88998ed3d139e1604e93e72f93400aa8ac08d27b6f14d4fdd6c9c1285a22bdfbef0

  • SSDEEP

    1536:PaEcnVHT1e/ofspSm+fqpSmU8xTTDAtFRYhIj9dbV7f//uOysYgibfbFDKsRf:SEcZZU6ipSf+UEetl3DYgafJlf

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

detect

C2

212.22.94.142:16212

Attributes
  • auth_value

    4dc4b156e536656ba6feec03bebf786c

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3dbd0fff1164843ed2b5d151a89d40d1.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections