Overview

overview

10

Static

static

10

e7216d8b70...59.exe

windows7-x64

10

e7216d8b70...59.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    345eec7fa7500089f3ad591521ffc2288b38d8a544f0af4a27a84f3197ee696a

  • Size

    118KB

  • MD5

    1b82ba5eb8707944b14b6103e271b274

  • SHA1

    4397492c04afc29d649c183eaeada57aad7f3ec8

  • SHA256

    345eec7fa7500089f3ad591521ffc2288b38d8a544f0af4a27a84f3197ee696a

  • SHA512

    a636ba496ac4ce528cf3d3051048bb54798dd86b2937956b1920327c1ed80b051375c2242034f1d901a0b850a529f9829f7e7698d1272c5bd4813bd2e851d490

  • SSDEEP

    3072:ZlwusbwtOxkKUF75SLBIicZ8Jrfk4mIhTaWs0jYTe5pkiWdwODV7L:Lebw0+vN5XsJzkKo0jv5pkiZK7L

Score
10/10
@oni912redline

Malware Config

Extracted

Family

redline

Botnet

@oni912

C2

45.15.156.209:40481

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 345eec7fa7500089f3ad591521ffc2288b38d8a544f0af4a27a84f3197ee696a
    .zip

    Password: infected

  • e7216d8b7084c0c36d90aefaf30bb7b6d10ae2ecae700889d459ed5ab1b26a59.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections