General

  • Target

    i9213734.exe

  • Size

    174KB

  • MD5

    907a84a4a040d733dd38b933a4246ceb

  • SHA1

    47f26638d92b20578fcccc3e81a80d1641f2b2fe

  • SHA256

    392e648592bff75fe279cd485ce04946025e16ee3fcec4f500c003d30f1f3337

  • SHA512

    adf1280dc0d8854f2529bdf69860ee545fb24b8c583b5b971f95a6ceb2fd6e42f3bd8ada782f8d305e76af020fbaae42cdec1dff8d6a57af491c76a4b0dfabec

  • SSDEEP

    3072:b5fB8CH2R16klxNtmud8q6msW+/8e8hrXO:bF5kbjV6msW+/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

maxik

C2

77.91.124.156:19071

Attributes
  • auth_value

    a7714e1bc167c67e3fc8f9e368352269

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • i9213734.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections