General

  • Target

    41b3829e0cfa50f67538e32855edfb41629a764c9fab5e6185bc5f2245fe3a37

  • Size

    304KB

  • MD5

    5110fce3191873bcf327a4288395b21c

  • SHA1

    bff3df492fe2dc5bf6a70aac3ddf73c575bae352

  • SHA256

    41b3829e0cfa50f67538e32855edfb41629a764c9fab5e6185bc5f2245fe3a37

  • SHA512

    8b37f2912c90cbca62301b686f39e2c90b039aea0479fb2f938f2c932d0fdfbcd6a4f09bcff10d8aa7fb4f5ea195c2cc9620a0b9c5b89e0d3a21b127e5a88150

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 41b3829e0cfa50f67538e32855edfb41629a764c9fab5e6185bc5f2245fe3a37
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections