General

  • Target

    TS-240225-UF6.exe

  • Size

    296KB

  • MD5

    ea42bd3db63cb582db7df6342a18ecaa

  • SHA1

    d2a38a4bc766f6e71c37091b47d993e5d893e543

  • SHA256

    e3a6bd3a517e8c9fa5209c0c5c09a29a58044658bd5e5c8ce0ca4ab72795218b

  • SHA512

    594e409fcf0f2d80c584aa29daa9dd878d392b255c033ddaf19905914ec343f852fe56665c13b4f953926a73ed5e900005c967f670ce4f826ed0e5b05164f8fc

  • SSDEEP

    3072:Fuq8+MBKqnSMJdjfN8RsMn5bBwqrJzZU71zXcZqf7D34NeqiOLCbBOk:FVhMBKqnMRtBBd9zZ2dcZqf7DI3L

Score
10/10

Malware Config

Extracted

Family

redline

C2

15.235.131.20:44647

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • TS-240225-UF6.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections