General

  • Target

    ca90d06441d1412e12d35b60ea905e0bbb67e3eb5a7e7ea72e75fa23bc5d7262

  • Size

    306KB

  • MD5

    8784cc1fecf54afc0e3d1479e48394e4

  • SHA1

    2827d8f7768678e9baf680e65be3684fcc36035b

  • SHA256

    ca90d06441d1412e12d35b60ea905e0bbb67e3eb5a7e7ea72e75fa23bc5d7262

  • SHA512

    99e5925b181c5ef021c097f0cb1f80e3f217673a8ea720ce2fe5ee9c88f9be77473c64bc3e48c8bfef74b7a37753216acb3d48732acca140f85a776530d69f90

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ca90d06441d1412e12d35b60ea905e0bbb67e3eb5a7e7ea72e75fa23bc5d7262
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections