General

  • Target

    b5cf0587fe4677d74cb86e22cadcb94235fb0d21071096d8542769d59275df55

  • Size

    306KB

  • MD5

    d97e63f223139473c0a53046395151e7

  • SHA1

    f76bcf137c446ca9c0a7962964602e9646486428

  • SHA256

    b5cf0587fe4677d74cb86e22cadcb94235fb0d21071096d8542769d59275df55

  • SHA512

    40d5c9ed51685371d6e2fac25cb055c437dabcc11904c1e515cd737e3dca8d3f396d40c25eecb0b1c87eeccb6a204e8c778a8e5c77320d5af38a2f699e276d66

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b5cf0587fe4677d74cb86e22cadcb94235fb0d21071096d8542769d59275df55
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections