General

  • Target

    02ffd9924e6ded59919c99bdc68985d3e0a9dd30dcba73af885b1a8ff88aff10

  • Size

    304KB

  • MD5

    1a9e2c5b934aba48b416f3a4e2803bf7

  • SHA1

    079de9979c8f4c9545c81d6e761a3a4eaba86a80

  • SHA256

    02ffd9924e6ded59919c99bdc68985d3e0a9dd30dcba73af885b1a8ff88aff10

  • SHA512

    f374f020cbb4dd7dd500bca66c50802bd4e4ce4897ed104cb8b1b4587975d8a8cdac7471fb7f7f24532b016ba15f9cce1ded6cbb33ff2fd033df809f58eace08

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 02ffd9924e6ded59919c99bdc68985d3e0a9dd30dcba73af885b1a8ff88aff10
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections