General

  • Target

    i1009537.exe

  • Size

    174KB

  • MD5

    ebc94da1f9aa5951a1772e27710c4147

  • SHA1

    8e4f4af1dd2e5c919580859571c199ae16cf0ffa

  • SHA256

    6abc00482649fcd2b81a295536adb68e22d42e5e1bf88eda9b05be6144faae77

  • SHA512

    8c174a44eeb517af98589786473c57be757911faf940aecfd1bb92bf1c7e2d2d0ce7b453df36ea1dc8ad98281f56b059d57f61b5b7be8adc863022b09febdfbf

  • SSDEEP

    3072:z+BDWfkwS/VcI0EMHiRONe9GT+qE0gRrOaQ9JY8e8h0:z0DWfCcI0EMHijqE0xaQ9e

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

gena

C2

77.91.124.82:19071

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • i1009537.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections