General

  • Target

    file.exe

  • Size

    174KB

  • MD5

    0300c281ffed79e0a52c094b659b4646

  • SHA1

    8760546538e1df82f75da97d0e9af80784b268de

  • SHA256

    1f8cbca09ab28bf32ee53b0674064aa827ad246aa655a12a7a0da08e1e8dbeab

  • SHA512

    e583d6113d25d34922b1195b4a1710b6c378c26e599fd2ab08e7b2c52c8716049bd428c19baaf7c2383f705f3bd698dee4e90be763bd9ce58e2d30e349b30469

  • SSDEEP

    3072:MFFniSjyI0is+mFOvGsbIU1PM8/E0kBPUJZ8e8hf:6F5yI0is+mBC/E0x/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

sq1

C2

185.225.74.51:44767

Attributes
  • auth_value

    698af4e4684b19e1acea9a7ebb86fc9b

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • file.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections