General

  • Target

    h7828780.exe

  • Size

    174KB

  • MD5

    373cbdae060ddce609907b40f112ae63

  • SHA1

    bc1b80d68211a0797b0e5ece77de656bc7e0e11e

  • SHA256

    cad8155f3cd7fa29ca59bd4bc4b9646a82bc8a07011305664a7cf811bce9663d

  • SHA512

    9d80cdee8b5908c8c66bed506a52f8cfb9cfdab3bf399424d6175376bd0a476efe9ca062e046e661e1ebaa5e353db40889bee52c1d31ce4d7073a81f31efb088

  • SSDEEP

    3072:KiZIEVII0FNuHZOJpFLizeIkqffffffffffffffffffffffvfffffffffffffffm:KiVII0FNuHYIpffffffffffffffffff3

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

tuxiu

C2

77.91.124.82:19071

Attributes
  • auth_value

    29610cdad07e7187eec70685a04b89fe

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • h7828780.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections