General

  • Target

    file.exe

  • Size

    219KB

  • MD5

    4f19cf852bfcf75555e23686e6f2d856

  • SHA1

    d472709da9980b7c11b4cb3917c80d09b8e5724e

  • SHA256

    8b70277352697c2419e144edb6b496b622e36505c3bc4597099d06a4b6457105

  • SHA512

    8622c688b9f63f0da00887972613122e74b4580387e3c489b201619c8fb40e000dec70d73a16e320c08940c8bcf680cea70df5ef06744e91aaec244ffb6fd693

  • SSDEEP

    3072:HQLC7lNgc+6purITn4d1sYq4RSd2q1SPwegeD8EKS1:HCC7lNgc+lrITgq40cq1SIPeD8P

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

sq2

C2

185.216.70.233:30615

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • file.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections