General

  • Target

    33b91e0bd97d6a7c4ffbfd6666ce7af5d20f0083a817ffbcb4c693b413e11e39_JC.exe

  • Size

    174KB

  • MD5

    c2655f3d4ce5ee7e0a85e9babdf85ab6

  • SHA1

    4ebd87a4bd12b9cde4e35e4794ef1759522905a9

  • SHA256

    33b91e0bd97d6a7c4ffbfd6666ce7af5d20f0083a817ffbcb4c693b413e11e39

  • SHA512

    5fc5cfd9c36161981c7a996d05ffe19aaac897b1872c518f5f551ccddd57f942184350b146c04a0353358a27173fd1b0747923d531a6cce4da60e40cf2d22690

  • SSDEEP

    3072:Lfn6mOAI0ueunROwoGYqLE0I8MnBjJk8e8hfyl:LfIAI0ueunBLE0+Bji

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

sq1

C2

185.225.74.51:44767

Attributes
  • auth_value

    698af4e4684b19e1acea9a7ebb86fc9b

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 33b91e0bd97d6a7c4ffbfd6666ce7af5d20f0083a817ffbcb4c693b413e11e39_JC.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections