General
-
Target
345eec7fa7500089f3ad591521ffc2288b38d8a544f0af4a27a84f3197ee696a
-
Size
118KB
-
MD5
1b82ba5eb8707944b14b6103e271b274
-
SHA1
4397492c04afc29d649c183eaeada57aad7f3ec8
-
SHA256
345eec7fa7500089f3ad591521ffc2288b38d8a544f0af4a27a84f3197ee696a
-
SHA512
a636ba496ac4ce528cf3d3051048bb54798dd86b2937956b1920327c1ed80b051375c2242034f1d901a0b850a529f9829f7e7698d1272c5bd4813bd2e851d490
-
SSDEEP
3072:ZlwusbwtOxkKUF75SLBIicZ8Jrfk4mIhTaWs0jYTe5pkiWdwODV7L:Lebw0+vN5XsJzkKo0jv5pkiZK7L
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
@oni912
C2
45.15.156.209:40481
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
345eec7fa7500089f3ad591521ffc2288b38d8a544f0af4a27a84f3197ee696a
Password: infected
-
e7216d8b7084c0c36d90aefaf30bb7b6d10ae2ecae700889d459ed5ab1b26a59.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections