General

  • Target

    myexec64.exe

  • Size

    165KB

  • MD5

    83f286344dbf13539b525954bbc7b525

  • SHA1

    835c53333b289f438a0be2274c39ff5d07a40f1b

  • SHA256

    07b5d39b67400f7b7b3ccee2ecf254cbe564880677f14172a39255d3d5cbf4af

  • SHA512

    f223b438843be12efb2159f593eb951ce69b82ac20a8e1f1bbd833c41d9a3ef103ac28fce97d5d7f1b09e431a62e359a077f9ac8f2d80dfb5bcfccc7808585bc

  • SSDEEP

    3072:22JLXfYoQk+nJLMbI7NKeiZixKMD4UydbXcnDaAxKR5AgkC:7NbIEn1bMZxKPAXC

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

@Pixelive

C2

195.20.16.103:20440

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • myexec64.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections