General

  • Target

    aa9d88690c48176d351abf560ab4e9e3c01f8a37caf662ec60f6f4087c0b9ff7

  • Size

    304KB

  • MD5

    a9d9f34dcfd96f3270c2b01e65d8ff8f

  • SHA1

    350a1598de792f5ceb36621cc6ce457d812052a7

  • SHA256

    aa9d88690c48176d351abf560ab4e9e3c01f8a37caf662ec60f6f4087c0b9ff7

  • SHA512

    baa22db195a59332119e127cf48ba5217155c39b286affba0686d9a976dec17fd01569a091e1b175687d4d8701f68a77b2f6c60dc539398d2b0bf8c76da0deaa

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa9d88690c48176d351abf560ab4e9e3c01f8a37caf662ec60f6f4087c0b9ff7
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections