General

  • Target

    h5531326.exe

  • Size

    174KB

  • MD5

    f8e6d22fee9ce1df80496787c5685de4

  • SHA1

    dab5db4646fff6b7aa534b7ff528ea06071d10fc

  • SHA256

    fb6d79f8cd979e5df09cea9df252c6125ef59902f19d1c667439b60cbd339275

  • SHA512

    7541b3a7d513d6945bc9830adf205ed3196ae7385991339ea4610431153fd242752c7148b69f944aa7f03932ae5d4540c09ef4d11450823b26e6a6a15b2ae4bd

  • SSDEEP

    3072:HmVenX0I0V916dOBCymtjvqE0WIkuvwJx8e8hN:Hmq0I0V9161DqE0Vvwn

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

luate

C2

77.91.124.55:19071

Attributes
  • auth_value

    e45cd419aba6c9d372088ffe5629308b

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • h5531326.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections