General

  • Target

    ca8ad76676acf8d0c8e20a2872aa69ef493a6fa896d00817fc7ce9d12fb3669c

  • Size

    306KB

  • MD5

    78a233e04e9df6ed1fe8e00468b8744c

  • SHA1

    700d9e8609971366a36ebd177c95216f0323aa73

  • SHA256

    ca8ad76676acf8d0c8e20a2872aa69ef493a6fa896d00817fc7ce9d12fb3669c

  • SHA512

    725af33ac9ef72524973695a76602fe055d1e88fb4a44cc404a534bd3065556289ec7e2576806440dcd4f0aee4e901ab72c0a3a87e306cd4e939a54a6c717016

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ca8ad76676acf8d0c8e20a2872aa69ef493a6fa896d00817fc7ce9d12fb3669c
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections