General

  • Target

    Kiwi X External.exe

  • Size

    348KB

  • MD5

    17203cf7ea11cbf5d1c2650ef9b6a869

  • SHA1

    9b0392cbc7a6993aed66b79f78d6797f3d85295c

  • SHA256

    7b425b1bc9eb4868b4e27da2d4f1556f35d03814569fc3de2123c11b8608bc92

  • SHA512

    5117875c1bda7b683a1561fea7393397d533c60f1045fe891050d5f4e686efa9d5f1b65d564dc52a6c2498e0eff2964964914cbd40d80611899bb7bc3a06a3e6

  • SSDEEP

    3072:GqFFrqwIOG6vyFcGyXTk2jKSMivMc+tiOzl/xJT9afHITcZqf7D34aUa0twbBOa:dBIOGe/TM/lZJT9UucZqf7DIa6

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

roblox

C2

77.246.158.53:13551

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Kiwi X External.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections