General

  • Target

    6ba1e6c03e1ed15fb2cc4d16881941794e33c671164eeaaeedc61417dc0fa92d

  • Size

    304KB

  • MD5

    4a1452df386c4326f2e0fa6b1b1eae69

  • SHA1

    631fba40285cb82928fc4d34227eec32f5b04716

  • SHA256

    6ba1e6c03e1ed15fb2cc4d16881941794e33c671164eeaaeedc61417dc0fa92d

  • SHA512

    a0719847128270b87b2b37316bd382b9f385f89aa3b5a6f0bbe414c1296dfbefc17f71a15d9692703c7d0b45d14ecb8009059db96cfd2cbf42740428fcfc5e79

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6ba1e6c03e1ed15fb2cc4d16881941794e33c671164eeaaeedc61417dc0fa92d
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections