General

  • Target

    387a337ce0e7b4a54b51f00a6122b5303684f547a12a1ca3e11d2d5e33b7e4dc

  • Size

    304KB

  • MD5

    de731d236569a209b60ac6eb00336a96

  • SHA1

    2f70cf85fe6542f38732cc4da271d4d9c75f311a

  • SHA256

    387a337ce0e7b4a54b51f00a6122b5303684f547a12a1ca3e11d2d5e33b7e4dc

  • SHA512

    585802b3cad12094a26f9190e67debb29c75a56f7904db01dab0642d29aa5c881baaba34a01c6421d2ba576f9a4cbd4e3dc45c1dbc8d27c82730f4ebde70ae5a

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 387a337ce0e7b4a54b51f00a6122b5303684f547a12a1ca3e11d2d5e33b7e4dc
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections