General

  • Target

    d58937d468f6ca92b12ee903a16a4908de340f64f894cf7f1c594cd15c0c7e47

  • Size

    219KB

  • MD5

    91d23595c11c7ee4424b6267aabf3600

  • SHA1

    ef161bb8e90cebdf81f4e53dfccb50c1f90a9a02

  • SHA256

    d58937d468f6ca92b12ee903a16a4908de340f64f894cf7f1c594cd15c0c7e47

  • SHA512

    cb9ed75c14e7b093cabab66c22d412371c639ace31fbe976c71ffec6007bf85b3d7d3e591fe5612e2a035298398d32e1aa7dc0d753f93328ebc2ce8e44fb8d2b

  • SSDEEP

    6144:lZQSq7dNgcFKsrSJkkpj/Ux74c0d01SH0xWSwMPGO:lZQBNgcMsrIjgMcy0xWSwMPGO

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

@oleh_ps

C2

176.123.7.190:32927

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d58937d468f6ca92b12ee903a16a4908de340f64f894cf7f1c594cd15c0c7e47
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections