General

  • Target

    142ad22cf70917fa5b60248d8b6dbdb8fa690bd10b1f7a0afcb8eb033cebd01f

  • Size

    305KB

  • MD5

    867f8ca65fc2a8d2f18d56a62c856666

  • SHA1

    0c1c2b6c1abd2ce2e5906011aae3728a6d67fe48

  • SHA256

    142ad22cf70917fa5b60248d8b6dbdb8fa690bd10b1f7a0afcb8eb033cebd01f

  • SHA512

    a78bc82dcf9672509bd132cb8d523f2bb0984df3b3fa29d9ccd15ade5f642b708a6ef4fb1d88fcd7f738acd007e9cfd0f414d4c66ae4c27df535dd6d261f2c7f

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 142ad22cf70917fa5b60248d8b6dbdb8fa690bd10b1f7a0afcb8eb033cebd01f
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections