General

  • Target

    b8d0793ee64e7b44fe24d0befa8d14a8f74c8bd76a8cbcc55ad1d5f8f08667f0

  • Size

    305KB

  • MD5

    6f1ea32d7b11196fdc441fd1028fd921

  • SHA1

    3e1abee07340edb48d25043191fb9a5e949a7b44

  • SHA256

    b8d0793ee64e7b44fe24d0befa8d14a8f74c8bd76a8cbcc55ad1d5f8f08667f0

  • SHA512

    6f874021ca4181825ad9d7c40c65e1905ab0080186c0552e84a322641b8f9fcb278721fa2785e136cfea9e58ed241ca3501a880f23e7f150dc6fd8bc75f3fd16

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b8d0793ee64e7b44fe24d0befa8d14a8f74c8bd76a8cbcc55ad1d5f8f08667f0
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections