General

  • Target

    fe5d827752446c287c581f1c20b559f66b477e98ddf453d3fbaeeb6419aa792dexe.exe

  • Size

    219KB

  • MD5

    d8d88d5850ac88aa2069cdeb0a232a89

  • SHA1

    d361fd111d2a5145670a5f8739915f2786cb111a

  • SHA256

    fe5d827752446c287c581f1c20b559f66b477e98ddf453d3fbaeeb6419aa792d

  • SHA512

    2fef4034ba2beadc5a84b5c1163dd58ed2f583a910b4511dd9437fe2c1e2c27639771642386437b53aecfc57c8375b905eae3dbb835ba8ae969d7727e65ffd11

  • SSDEEP

    3072:6693FTitU7pNgcAfimrHV7+9IWQ8ARSdhs1Sc9eOCd4NpKSo:669V+tU7pNgcARrHV040vs1SstCd4Nk

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

sq3

C2

194.169.175.220:30615

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fe5d827752446c287c581f1c20b559f66b477e98ddf453d3fbaeeb6419aa792dexe.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections