General

  • Target

    191f730f9b4667255e6d083b18efa35b25c8c174b41911930d4edb5bd4baddff

  • Size

    305KB

  • MD5

    4af8773a6f6d62b8e01a9f5364e5f4ec

  • SHA1

    4f7fcfe539edcb7b1dd6eac132c1ef265e3dc831

  • SHA256

    191f730f9b4667255e6d083b18efa35b25c8c174b41911930d4edb5bd4baddff

  • SHA512

    8fe34a2ebd7c73e74132eb2a7e8ee699a7158e9bcf6a0a4d9c46c8ccca96b669809081767ae6abd03b3fd55ec196fa4f8564a5ac4c7e2284fed2cb5e3779889d

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 191f730f9b4667255e6d083b18efa35b25c8c174b41911930d4edb5bd4baddff
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections