General
-
Target
e8b9cbe943b030010dc976ca280bd3168842fb7a002e268fddcec137fede1be1.exe
-
Size
473KB
-
MD5
0218a6e9bf2d89920d0b259187009ee9
-
SHA1
21fddda558c7560fbed27d57bc5a1fc0b10d304b
-
SHA256
e8b9cbe943b030010dc976ca280bd3168842fb7a002e268fddcec137fede1be1
-
SHA512
c8f02dc22a6081d85d3437d4a0f17641e17e7b87f5abe0d3e0c4160d68449043ea267d074b419d8340145037c02f8effde5e490fd9116a17e435bded67273605
-
SSDEEP
3072:HA0tnblO9c+OzM52LsbfbujzJ8KFnyMxs589kIMRqfjDv/YiBihA1NbBOS:bauzxLsbfS5jx48hMRqfjD4iBih+
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
Employment
C2
116.203.63.87:9216
Signatures
-
Detects executables packed with unregistered version of .NET Reactor 1 IoCs
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e8b9cbe943b030010dc976ca280bd3168842fb7a002e268fddcec137fede1be1.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections