General

  • Target

    tmp

  • Size

    174KB

  • MD5

    c2ce41232bcd0237adee4dc075136551

  • SHA1

    868b38083f67f4c9d756364aa1c0c5d5d69595d2

  • SHA256

    a0c33c79e0ccec5a8f5e71082180366893e3e0527fc1fcf9c1e6ca097e39b0fe

  • SHA512

    ff4e50b483086db00924feae3a88fc59b4bad11fffc7582eddc1526834d1ce04e833a01981b529e0396bea3cc8981f4ac69f68acf81bf540686318b065b5970d

  • SSDEEP

    3072:2rbL67KI0O2QuYwOvAuYW8YkE0GuRRIeJ18e8hR:2rOKI0O2QuYl8YkE0XIez

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lnk_mega

C2

89.23.98.75:45768

Attributes
  • auth_value

    5aa066b39a5d56eccdb22301dab01085

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tmp
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections