General

  • Target

    b0b37311718da60670d49a408e8ec4ccda546a773a83b10e3bdaca2e18d4004f

  • Size

    305KB

  • MD5

    179132e5f0a9fe8551ed7de8abb3869c

  • SHA1

    a6bb6b5a7e5a76be631ece1ab9bfff2b6e3c2e83

  • SHA256

    b0b37311718da60670d49a408e8ec4ccda546a773a83b10e3bdaca2e18d4004f

  • SHA512

    ea32252086b1fa023869896ed93d3aea4c2ac29d4f163dbb6831bbdb489d1756087a32c9da57e4529a284d129305250e9d60c2aeb8bfed2cb73347e39eff7dae

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b0b37311718da60670d49a408e8ec4ccda546a773a83b10e3bdaca2e18d4004f
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections