General

  • Target

    cbb3e62d66439525b55bae2d3a46b2b9463e477578441edbf6239dc8096f3de2

  • Size

    305KB

  • MD5

    172744a8e0d956fabc9d26477b4944c4

  • SHA1

    132f7f18a959532a5412abe2dce65d6b580d7447

  • SHA256

    cbb3e62d66439525b55bae2d3a46b2b9463e477578441edbf6239dc8096f3de2

  • SHA512

    57d45259d6005c4fa6b0eac4d0dc57a47c3ceb63094db58a9c9522c89292a798c9b3a9747503ca81411d01d4c7ea3c32844611ebb6bb86b98dc8787c799a5850

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cbb3e62d66439525b55bae2d3a46b2b9463e477578441edbf6239dc8096f3de2
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections