General

  • Target

    6db57bc57f9c0b7433b6744b57cc985dab4d1ef8f8c903413442d0af4638995a

  • Size

    304KB

  • MD5

    cc99df95c13d5ba5880224be40f18469

  • SHA1

    b5a88042480fa56583eb5dd6941f8db4306516d7

  • SHA256

    6db57bc57f9c0b7433b6744b57cc985dab4d1ef8f8c903413442d0af4638995a

  • SHA512

    9c36021fd663e6f1d5e5921466f3c018e316656ee8e2ca4af1f7fec8a4df9b7b245a8b1f37805c41db96e22d4642a68a7916484ebed6b1274ddede78acc12062

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6db57bc57f9c0b7433b6744b57cc985dab4d1ef8f8c903413442d0af4638995a
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections