General

  • Target

    6ac77b3a801b49f8131b8f6fa0fa399ff173e0dc6f08a415bbb859c80fd08558

  • Size

    306KB

  • MD5

    965609acb4faf0ca4368ff985613aaca

  • SHA1

    6f8018f65782592278d7019f34e34a30f515ef58

  • SHA256

    6ac77b3a801b49f8131b8f6fa0fa399ff173e0dc6f08a415bbb859c80fd08558

  • SHA512

    3474e0aa3df4088954a5d94d152b892a01ee587c685eec2eec0ccede49db7aafc51171b8dd8497421dbc63423f64e7b71b9205af84eaa49a0e7eb80dc5f91dd9

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6ac77b3a801b49f8131b8f6fa0fa399ff173e0dc6f08a415bbb859c80fd08558
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections