General

  • Target

    fd2831a1b50c0a8e063e77a6683d0bcec9c3c750e1deb4a7302a0d817082c5d7

  • Size

    305KB

  • MD5

    efb17f588b2cb50e34dbf52a499c944d

  • SHA1

    eeac87f2b0c533aab6abdaadd7ec78f704736a24

  • SHA256

    fd2831a1b50c0a8e063e77a6683d0bcec9c3c750e1deb4a7302a0d817082c5d7

  • SHA512

    f345520a400b81427d9f5e12e3ba0fb31367984a91525a46c3320ecfc1ecfb4c1acd54fd90022c18a53a5e6f6ba621429560dc875c52b2873626ee235c2a358b

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fd2831a1b50c0a8e063e77a6683d0bcec9c3c750e1deb4a7302a0d817082c5d7
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections