General

  • Target

    6000a2d29be7315cf60b708c5254f3d99a00d85ecbb5823117572ed489b8f018

  • Size

    306KB

  • MD5

    4f1b8e357e69c6c5a92abd84ec970257

  • SHA1

    da90864ce9b2908f3e31d0546799faa250c05889

  • SHA256

    6000a2d29be7315cf60b708c5254f3d99a00d85ecbb5823117572ed489b8f018

  • SHA512

    4a7a37808f879137e56bd997bb3256a995661ef0e5e33d85c3fec735a22b7caf24321e954a8dc3fe8dc229485d0e1c176c47d4f73843ff345102ee8dd2fe1246

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6000a2d29be7315cf60b708c5254f3d99a00d85ecbb5823117572ed489b8f018
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections