General

  • Target

    b23cda9f6f88d54905c80caa9defea8e62ff93f9b86af5a2ffd5053d0462eed9

  • Size

    305KB

  • MD5

    21ed998c0f1be69e3cb8e7881da72dea

  • SHA1

    0408f500bc445882deabb227d2c19bfd8bbe8824

  • SHA256

    b23cda9f6f88d54905c80caa9defea8e62ff93f9b86af5a2ffd5053d0462eed9

  • SHA512

    b35c36caba2ab6d5a408ee3201dc9770e2ef2444058e5f34e0e7f26e2e84b5fea8a22c11c6d5233d745fa137c45ec807fd8bdb7aa6ec09cf2eed41072de5f64e

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b23cda9f6f88d54905c80caa9defea8e62ff93f9b86af5a2ffd5053d0462eed9
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections