General

  • Target

    99ef8c69ab389d2fa3a6491704fcd0d5.bin

  • Size

    4.4MB

  • MD5

    99ef8c69ab389d2fa3a6491704fcd0d5

  • SHA1

    5f45ebddf83bd0dc1ec16a33b8730434f1443de9

  • SHA256

    ae887c4a999388cda0d75b30491d336358ec755dda4155c1b29b119417267a97

  • SHA512

    1b4400fc83183636e5f0091fdf26c8bad8e3adb302a8769bb98b3fba427a15505533aff1c7f47dcfe2f81cb516a2d1e42a135bb62b3660d404501e73c0e3b94a

  • SSDEEP

    49152:ZkrDPn2St9azHKi+SseATlb8P3QtPF+K4wIV4+RPrJvJIHi:ZkrDP2StEHK1SsVTlbZF+K4b6+RPrJvT

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

1w1

C2

135.181.242.178:42473

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 99ef8c69ab389d2fa3a6491704fcd0d5.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections