General

  • Target

    jioafdjgh.exe

  • Size

    287KB

  • MD5

    d1ef37248b66ac6076b4ea6d1223f272

  • SHA1

    1bca5d308cab6013b78653f98971331e0d972992

  • SHA256

    aa33870935c58f52e135185cea818070c6b4bc4409f5dbc1ed99168c86c0fdef

  • SHA512

    9ce92b8152aa7de6e616369db1c005d6d4afca2e29cf96dea4395627ae3062f7cb4e4c5e0afd06223e9ac7d8e4f2772724e1cca7f6242ce280304b38ce0b7ee5

  • SSDEEP

    3072:B2KLTnYEQwKvxLrAm0FN+q2pGuhTMo1syKXLn6yujgrxphaAykPMRqT6Dv/YieqP:IKm0/2gST98wjUxpQA9PMRqT6D4wLJ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

legendary

C2

195.20.16.103:20440

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • jioafdjgh.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections