General

  • Target

    4f1ee0b98645d8f36b39efa3ee575708bf98341ec664b7d3991c06697d0f96e7

  • Size

    305KB

  • MD5

    9507cbf19cafdc5a7fca6437f4f70dbc

  • SHA1

    ad2f29a672c5f3a1b8a9edba2b3af36e418c6dd0

  • SHA256

    4f1ee0b98645d8f36b39efa3ee575708bf98341ec664b7d3991c06697d0f96e7

  • SHA512

    a3b2452ba189fe3d8e7e70df0e58946b3f674de8ae0c7d9d68b7d54f7be821e2393255e494a2c5d99e822904a680c18249aba6c4c2a841bad5fd0a033b578fc1

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f1ee0b98645d8f36b39efa3ee575708bf98341ec664b7d3991c06697d0f96e7
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections