General

  • Target

    2952ba58fb0bf15850c0478fcd75e236

  • Size

    304KB

  • MD5

    2952ba58fb0bf15850c0478fcd75e236

  • SHA1

    3e07dc899850a7d69cbfbf8c04f72ccaa2408939

  • SHA256

    d59649332816fca2c74de3d04445fcc521e6d3c26d7b9b753c6a3ad98146d1b6

  • SHA512

    80553685703571baf00c735e5fdf4ed2caf0fd9b74ecd71aa1a819ad82a2cb899daeb4806b27068c4a92318fd8d3431510a36f8180d9621bf15d66e62c8ce5c8

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2952ba58fb0bf15850c0478fcd75e236
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections