General

  • Target

    f8d2a33b69e37e4cd1bf4cbb2d7f125c1de1929c62fee8fe4ef85b32df81331a

  • Size

    305KB

  • MD5

    67dd550d0e30888cad7864d64fe8ffd2

  • SHA1

    2ca74b24aae09a5ae5c60e8180c2a49ffc6b0fa1

  • SHA256

    f8d2a33b69e37e4cd1bf4cbb2d7f125c1de1929c62fee8fe4ef85b32df81331a

  • SHA512

    dd3f731e8aee990ff4c07a686b15ccffa07b9b2073e3565bc1671728747a9d428e90eed0a89ff4e29e86ae8fff2c853bf7a4b383cdb48a346f5fc056abfc3956

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f8d2a33b69e37e4cd1bf4cbb2d7f125c1de1929c62fee8fe4ef85b32df81331a
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections