Overview

overview

10

Static

static

10

dbcb61ce94...b2.exe

windows7-x64

10

dbcb61ce94...b2.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e6fb51dc9a3ff47837d7d199312737abccb318a48849bb0c9f6ec40e4537dbe8

  • Size

    111KB

  • MD5

    12daac61adc76ba3712897bd67411c73

  • SHA1

    8abee40f0915182f2a54a3b761e7be616b335fcf

  • SHA256

    e6fb51dc9a3ff47837d7d199312737abccb318a48849bb0c9f6ec40e4537dbe8

  • SHA512

    3067024f6731b46cf98e2c8e7479549cc29018925e2eef0d33899c826cc2e6919816be536375477705d7816c314be5cef5a093408e07d6385ea31954b66b7ed6

  • SSDEEP

    1536:itTLY7XGuWuRxbtgaHzn0a3PUWl0PR3/aJBfVl7rEaCNa6ApzMGwuNuruT:it/Y7Xr5ttTnRP6PRCJ7lG05pzDtN4k

Score
10/10
redline

Malware Config

Extracted

Family

redline

C2

185.215.113.67:26260

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e6fb51dc9a3ff47837d7d199312737abccb318a48849bb0c9f6ec40e4537dbe8
    .zip

    Password: infected

  • dbcb61ce94c4d2d216de2b503937a2a964b984577f2d7730b7c6428b2b5e8db2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections