General

  • Target

    eb5299624b6ef50a8f270f13700e7e56.bin

  • Size

    248KB

  • MD5

    eb5299624b6ef50a8f270f13700e7e56

  • SHA1

    280b516d39b426e7461139b28b511bc75b54cd81

  • SHA256

    fd13b8c50fc900b850845394dedb658fde69323d1ee767baed5b4e389f17c330

  • SHA512

    e24b0e234776e1078088f5033c53a85011917f19a32d66804a82e61364bb0ebaa579be4f5bbe653990a832b95cbb4e11ee57f243abde693d4a2115031a28bf05

  • SSDEEP

    3072:2avpnnSNgc0pdnwdqESxPPPX6sXt/qRxqXpKcs51z6:1RnSNgc0vw9SxPPPXz/eqXphI1

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

Alex

C2

94.142.138.111:36270

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eb5299624b6ef50a8f270f13700e7e56.bin
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections