General

  • Target

    56e51a18fb2dc4de98ef82f6d09cb528efe8dbdf0ca64f1f8649029cf4e2ea89

  • Size

    304KB

  • MD5

    261132f4e5e687d844a598a2b43e3687

  • SHA1

    4030159023bf05a6b8ccb88a7ddcdb6e6807a0e6

  • SHA256

    56e51a18fb2dc4de98ef82f6d09cb528efe8dbdf0ca64f1f8649029cf4e2ea89

  • SHA512

    1297d54ead240aa038613b7f1784eb355a65f31d7bb82c32f17a6fef17fd38910a407390d0f1f3c6281014c5099533a4a881d6fd0f950b43aee9a21557e1c544

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 56e51a18fb2dc4de98ef82f6d09cb528efe8dbdf0ca64f1f8649029cf4e2ea89
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections