General

  • Target

    80aa01d7d3ee8e6cadf9128e87875162d05b34920dd315be7026a168ed7cca1e

  • Size

    305KB

  • MD5

    cc2cf2b688cca9212b84a6a74a77de83

  • SHA1

    af0d8a7a5e0d4f1770837ae6747f9f8f43457cad

  • SHA256

    80aa01d7d3ee8e6cadf9128e87875162d05b34920dd315be7026a168ed7cca1e

  • SHA512

    583adaa12ecb5dc89787dcdab960cadfdc3e7274eb5757dfbe555d0bca3d9fe31540c446a0f9241f632de27b53e8c9d59eba0a3b6d348da4ba92c1e700e568ff

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 80aa01d7d3ee8e6cadf9128e87875162d05b34920dd315be7026a168ed7cca1e
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections