General

  • Target

    6d405af9936d77bb98c56969915a81526100b1e980f9d9f13b2ec7c74035670d

  • Size

    306KB

  • MD5

    2360d6255eebb853ad4b2aa53b29eff6

  • SHA1

    2a9979fbdfa34824d20a089b47b2dadd9fe5083f

  • SHA256

    6d405af9936d77bb98c56969915a81526100b1e980f9d9f13b2ec7c74035670d

  • SHA512

    358d80b6cfc4fc30d63a6704159aae34f55879f9a19694ec7829ba62e24caf4fd3a7305611ce3bb747b0748a769db825e352392c1116029a137226d931a04293

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6d405af9936d77bb98c56969915a81526100b1e980f9d9f13b2ec7c74035670d
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections