Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1081d313fe627ca22ce02c7bd8d33ece52b1e2cc8978f99653671f94175caf8f

  • Size

    222KB

  • MD5

    9e41d2cc0de2e45ce74e42dd3608df3b

  • SHA1

    a9744a4b76e2f38a0b3b287ef229cbeb8c9e4ba6

  • SHA256

    1081d313fe627ca22ce02c7bd8d33ece52b1e2cc8978f99653671f94175caf8f

  • SHA512

    849673924bdb3db9a08c2ff4a510af599539531e052847caaf8a2d47f91497bedaf48714a3a6cdee1c0f5b8a8b53054c91564267be2c02de63446e207a78f9ea

  • SSDEEP

    3072:Nyng4InXNgcy9Wy3aPGcntCTt/qhGFlvDYLXZiTtzr:Kg/XNgcWr3aPu/5FlvDYLpqt

Score
10/10
@ytlogsbotredline

Malware Config

Extracted

Family

redline

Botnet

@ytlogsbot

C2

194.169.175.235:42691

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1081d313fe627ca22ce02c7bd8d33ece52b1e2cc8978f99653671f94175caf8f
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections