General

  • Target

    cb327c9ce4ab4102077c45ea37ab6fafd0e940a7ff29b05996f7bece97c1d751

  • Size

    305KB

  • MD5

    91d78ac5713ee6daaf108b4857f7becd

  • SHA1

    2d82de16007595d3ad056b3a1d85ace5ae2350ba

  • SHA256

    cb327c9ce4ab4102077c45ea37ab6fafd0e940a7ff29b05996f7bece97c1d751

  • SHA512

    36c39488b4025cc6a6c7a4b94580783a15e87aaada0a26929def01192d4a3ff0607a5e9503832eca034476c3d29a33c5c4fe9c9c677d814676c37acaad0d0782

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cb327c9ce4ab4102077c45ea37ab6fafd0e940a7ff29b05996f7bece97c1d751
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections