General
-
Target
tmp
-
Size
286KB
-
MD5
69b45d4bc58736d36246e384c06e9473
-
SHA1
41a1e6007fe97ec691fe54ffc3453feb74d0aab0
-
SHA256
3835fe3e13b67d406cc7c1412098bbf2fcb28371c6628539ddf46d98aa716ef2
-
SHA512
d5acf13c06554dfd724cb7e8f3b4dd2b91a44926b4b303c9695c4b4380d7ec6675a5514cc320f02d1e30afc62df48322cb44246f2a7fe47fb2df594f80b1b684
-
SSDEEP
3072:dqFFrqwIOGMFyf0SWFD4cWD+g/vOwsVT6lqq+JTZafHw75cZqf7D34HbBOj:0BIOGI7o+Wlt+JTZU0cZqf7DI
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
V3.60
C2
206.238.199.68:48458
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
tmp
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections