General

  • Target

    ef155dbd60fd1f25a9a6cecc09496037784ce330822b5b1c108185a5b2e51168

  • Size

    304KB

  • MD5

    69d36d2217b66c1c047e46db7efbf86e

  • SHA1

    5866d3fd2581670a5f067ac07d04ee4f2d40456b

  • SHA256

    ef155dbd60fd1f25a9a6cecc09496037784ce330822b5b1c108185a5b2e51168

  • SHA512

    df302b442cbcf9ac561635ece13ce38262e3906792f672c933ff5f038e2a9dbda796f31afd5a60d920829f9a8bc5d866fa69e77e6f5b1f0c6f2cb6b11a5719e7

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ef155dbd60fd1f25a9a6cecc09496037784ce330822b5b1c108185a5b2e51168
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections