General

  • Target

    SomeOne.exe

  • Size

    297KB

  • MD5

    336a39a3965dba11c37cb930c36a9d34

  • SHA1

    36a66cd92beccb3c1433d6618da4b9aec4d5ae85

  • SHA256

    11283eacf56982ad438e1060d9f11763c365f8ffedcf8e17f798b051f1a394db

  • SHA512

    6f146427200216a012fb143cb4415b98023e88da54776a24c14cd13b229d754d8710fd52a32edfe32ef3bcfd72af0349bc1e665f750241e613fadcd3ac95e336

  • SSDEEP

    3072:nqFFrqwIOGaHy9MGSwTc4klV4w5qv65TlacJTrcfHIicZqf7D34deqiOLCbBOy:qBIOGu4kcw5hlVJTrqzcZqf7DInL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

SomeOne

C2

67.203.7.148:2909

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SomeOne.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections