Overview

overview

10

Static

static

10

ef553e2479...38.exe

windows7-x64

10

ef553e2479...38.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef553e24792874ccba4d7e1ea15239b00d53267bb2d3da082025ca3688cbfc38

  • Size

    174KB

  • MD5

    7976e3637ef8f46fcb11be741f035519

  • SHA1

    331edff510a89e00578fd02baec2db39886f96f5

  • SHA256

    ef553e24792874ccba4d7e1ea15239b00d53267bb2d3da082025ca3688cbfc38

  • SHA512

    8d448f5823af4e350c6e28b5ed092a823d12a558e0e6770db7c137e8a075fe374c4364c72b6c818e756b4617abb025ea9cfe662082db6d6cf5e05b9bf670a846

  • SSDEEP

    3072:mUxxQs0iI0Rryf7OZmL9mhE02o7CC5RJs8e8hd:ZxkiI0RryfuhE0QC5Rq

Score
10/10
jamesredline

Malware Config

Extracted

Family

redline

Botnet

james

C2

77.91.124.82:19071

Attributes
  • auth_value

    619daacd1b235de863e564f0fe8feb6f

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ef553e24792874ccba4d7e1ea15239b00d53267bb2d3da082025ca3688cbfc38
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections