General

  • Target

    00b98cfe907d8c954fb4783e2f71db839646968e8251bbf16b6cbc7b60c094ca

  • Size

    306KB

  • MD5

    5d5924726bc6a4176d5089df3d7165be

  • SHA1

    059cb11164a5f1f4579dc3f9164771fde8a3f48d

  • SHA256

    00b98cfe907d8c954fb4783e2f71db839646968e8251bbf16b6cbc7b60c094ca

  • SHA512

    91a469e4c112f4c52ec7b571f3b0ab81277892d170047a841ccc921d4fdaf053c5e9752e29121571c1355b9ce24dba2c3ce4de0d5d0fc8b8ed3173416c0a8590

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 00b98cfe907d8c954fb4783e2f71db839646968e8251bbf16b6cbc7b60c094ca
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections