General

  • Target

    2cb915c6825f6f5a0a62f51c442650aa51ed17d517a44cf8e7b72fc6e9e7e230

  • Size

    304KB

  • MD5

    08ad9c50b1e0e0caaebc04588d487b2c

  • SHA1

    31fc42214d570dc11f2bb4c970d1e811b05c71d9

  • SHA256

    2cb915c6825f6f5a0a62f51c442650aa51ed17d517a44cf8e7b72fc6e9e7e230

  • SHA512

    40ca68201557cfb1bbcf8efae93e47b5961df68a06707209e3406d1160ffd7f498558cbc647f8850226c4793f710048cb3239d08e90dc6d41cd910e30248cbe7

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2cb915c6825f6f5a0a62f51c442650aa51ed17d517a44cf8e7b72fc6e9e7e230
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections