General

  • Target

    4e0f57d556361fa2d033b9932c84a448

  • Size

    921KB

  • MD5

    4e0f57d556361fa2d033b9932c84a448

  • SHA1

    3940ba74f8265f4480f457eed9d792d24bb80ad1

  • SHA256

    d687a47e65182ae25607c41c0262a40fdb2048cc7919f0757898b033919cc641

  • SHA512

    e501c85ff3dc9bafac6934ecd21a8ae10727bc03dcf947fdca7ed3e68006e044202b910d3de8fff9710b5d3fe888562bdea4c2546790645a8ae7edced0e285c9

  • SSDEEP

    12288:3CG/6JHbrVpkg4L6A4Mquf4w5V54ChVjga4s2Tm7d39nVu+UW9O76nN6Sq8:3CG/6JHbrVpZ4W3/unZtZNnVu1P7c0K

Score
10/10

Malware Config

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4e0f57d556361fa2d033b9932c84a448
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections