General

  • Target

    i8166860.exe

  • Size

    174KB

  • MD5

    75d75f83936f3dbe2db6736dc45e5bdb

  • SHA1

    acd0af2009c19af2b22682c55d17ef3f0c8ed697

  • SHA256

    1890fa549075f777532ec9adfddc7c3f227bb5391d3538b08aad3150fb8986d1

  • SHA512

    d9e90bf2854502480ac471adbd7ed2bebc48e425e44e556636922d7e30f159963f25dddb6bff6b25478ced83e2596c0ff5f23820d1e894058069d83a2ce2d799

  • SSDEEP

    3072:u89FRa7xI0k3jpQOP6DHpcyME0Qep5LcoJk8e8hh:u8dKxI0k3jp2cyME0dLcoy

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

moner

C2

77.91.124.82:19071

Attributes
  • auth_value

    a94cd9e01643e1945b296c28a2f28707

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • i8166860.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections