General

  • Target

    Riptide.exe

  • Size

    107KB

  • MD5

    344af9a8dfd465cdccc8f77f0561b532

  • SHA1

    1729cbb23f3d72ff1240fc361ba7fca586188fd3

  • SHA256

    dafdb739db574687bed368bcd970a76fd0182aad345ea66307ae80da23c1c2b1

  • SHA512

    76e5c68aab7fd9b4750ae0c2a97aee296ae75139156f9e55a53701a462d117a1280c707d9011616538b4a62946c5245ad4e111997330c16172614a2aaac943f0

  • SSDEEP

    3072:scvFBwCYJpiSI8AURjtte8+7cjnjT2hS4EASN1:scv+i+tthUcj2hS4jS

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mixypixy

C2

lanalannnal.xyz:81

Attributes
  • auth_value

    8e249b236247b8c1f0047856316255d4

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Riptide.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections