General

  • Target

    output.bin

  • Size

    304KB

  • MD5

    09c25a0198eb2d54a9a38d333df61c5c

  • SHA1

    cd3a1e21600d38a5e2bc3504235e71f41b36925e

  • SHA256

    a3134aa354a8411a6156055b2bc877621a5d9edf24a8d8c852c7c058fd1fc42a

  • SHA512

    a785912e4df6a37ec71b9de4fb99ed1fcdcbe9cdbf2b45a5593efb9fe75883ae84d51f3e064405da683a8950754f38cf65773d20eb8b65935cda5930c1e73b33

  • SSDEEP

    3072:sKq6EgY6iQrUjyzn8uwPHAU4qWcOGFTAQQASi0fhcZqf7D34teqiOLibBOF:sJqY6i2nwP943GFTABAohcZqf7DIXL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

50502

C2

2.58.56.216:38382

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • output.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections