General

  • Target

    file.exe

  • Size

    219KB

  • MD5

    fdacf3668801073be898676b316190c5

  • SHA1

    62d2fe2cd2b4db1990e8da3ae498ff56e13625ee

  • SHA256

    6badd733b6b2e44bf8636cc72a53ab643461d5b1bd63982586aa38456d30f36a

  • SHA512

    d006a13ca09f7c214deb97612cc40ab586872a6a47ea6a9d89c7ef47f142aa8d6e89f318c04137d418bbb9e324e7090e28d6f7cc166edfebf80384cd296f31bc

  • SSDEEP

    3072:udIBU7bNgcix/GrEA7x2KVSnJ4cRSdc61SawFokcKSQ:udyU7bNgciwrExYSJ4c0G61SXik3

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

sq3

C2

194.169.175.220:30615

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • file.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections