General

  • Target

    61c16d7e64d3ba99a7539f48a485b4fe15f806637b127e450ab0291fa19f0a2a

  • Size

    305KB

  • MD5

    582a7d16a0be637c7d1c3ba713027f53

  • SHA1

    f45dd108a6931f363be3a292c95d580e23d5a27a

  • SHA256

    61c16d7e64d3ba99a7539f48a485b4fe15f806637b127e450ab0291fa19f0a2a

  • SHA512

    3bc58a2168d5fd01e5dab354469bd8a757a996811a575c2b9d5838af7fd598cd83cd0576080b80485854b2b9d6bc7a53e2067c7e07a6dea6292b98eb6a182ad5

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 61c16d7e64d3ba99a7539f48a485b4fe15f806637b127e450ab0291fa19f0a2a
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections