General

  • Target

    dc94522b6244408d9ee82dd1425dc22c62c9041e7a66edccccda29548aa1cf8d

  • Size

    305KB

  • MD5

    08797fd9f687000ab150ba814b57122a

  • SHA1

    bb4ff3ad4a69636fa34791c7092033eac1f8b5d7

  • SHA256

    dc94522b6244408d9ee82dd1425dc22c62c9041e7a66edccccda29548aa1cf8d

  • SHA512

    bcd57b3e565eee6756f5f928fd4073f3537462e0accf5bdcc1e2677553f29530e89dd88f15c68f1a98926dd7adec50a57bb5b91d9ca3f39dcdd5aab67ddeeffe

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dc94522b6244408d9ee82dd1425dc22c62c9041e7a66edccccda29548aa1cf8d
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections