General
-
Target
file.exe
-
Size
221KB
-
MD5
d1c6f534ed99e48438b09d519c392d1a
-
SHA1
9807bd326ac0e7ec154a4a8e1ef0188bcdf29437
-
SHA256
febb7ca5e46576693b590dd0505fc04f6a1869e8b33710610945f41cdd748ef3
-
SHA512
e3c31ac9df240005dc5d548cb75f0b02ec5b1a340fb63fd33696e1fde902bfeb8d9d616ebea46f3532340fc0d2202f9ed250e5d487257461cce37e2fdc75e681
-
SSDEEP
3072:3JYiCnaNgcWhx73J4ziUoGDet/q/1Bfm5CeDQ94/Q:5YPaNgcWL73W+j/QBe5Ts94
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
sq1
C2
116.203.156.63:28564
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
file.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections