General

  • Target

    c0574fc7ae8518f2a8b383f82488fa6f8873f9605a95830daf50dbbde59d0b98

  • Size

    304KB

  • MD5

    1d74b46f2ec4f0c1b3ebbb8d8c7a7b2f

  • SHA1

    e9914061a1fbeee935a8e8af80eb514911f5d265

  • SHA256

    c0574fc7ae8518f2a8b383f82488fa6f8873f9605a95830daf50dbbde59d0b98

  • SHA512

    795ffc74d06d6ad8c42602413e0eca252b942acfd3b2abc20c6d4b446804c85546d8d26987453e82ab5b1f4aa39c7c63679d32ae222a75ddf3000e7018f56ac1

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c0574fc7ae8518f2a8b383f82488fa6f8873f9605a95830daf50dbbde59d0b98
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections