General

  • Target

    4ed95543c89466dd737d500b4773e670.bin

  • Size

    223KB

  • MD5

    4ed95543c89466dd737d500b4773e670

  • SHA1

    8757c2ba0d969a74379aac3b0745aa4b5eff8a32

  • SHA256

    52f5fb7c7af23f278d7edfe8e34e527e2f90cfce239db3ceec12b278af8fab90

  • SHA512

    a19a3e2c1fa77e6decc60e2757433cdbb12f812f4fe8f3f92d3c2de2aa03580140615b999558fd3becba59d0c1ee6a673bd22002336412823de10429fdd27a90

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ed95543c89466dd737d500b4773e670.bin
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections