General

  • Target

    a6c52399fe98dce0ff808b74c2c158e3ec5e85378f154afe63ec6137fc5f5666

  • Size

    304KB

  • MD5

    54b04b670ca4a52d56502a7211f0b1c5

  • SHA1

    6b7e9c4cc5a6124a8cf2b449de31193ddfa1e4ab

  • SHA256

    a6c52399fe98dce0ff808b74c2c158e3ec5e85378f154afe63ec6137fc5f5666

  • SHA512

    196eefc7cad2a03553bbdf6b5afb28fe8f8ef23b7374786ecc58e2c2b95415dac51977f7009abc7c5438b38368a8bd8dd9471d40da3130ba8b5fb8e736243476

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a6c52399fe98dce0ff808b74c2c158e3ec5e85378f154afe63ec6137fc5f5666
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections