General

  • Target

    i5232661.exe

  • Size

    177KB

  • MD5

    112c8cba083ead480d85e492a7f6db13

  • SHA1

    22d83faf6e37a2b2dffe7b81ae910f4044ed0ddb

  • SHA256

    27f448488932f5c09d4c654a2adb1e17e8072637d527a0558e7f719f17917da5

  • SHA512

    4372f900572499593abd26dbc43168132479528fc59e2e87a5b4a25aec8eea2b9edacd2c025da5286a78d17d903af2e8041ecf044a7f08beeb8cc02c57a7373d

  • SSDEEP

    3072:b5fB8CH2R16klxNtmud8q6msW+/8e8hrXO:bF5kbjV6msW+/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

maxik

C2

77.91.124.156:19071

Attributes
  • auth_value

    a7714e1bc167c67e3fc8f9e368352269

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • i5232661.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections