General

  • Target

    14eaeb52e4ee63e83ac0c70a55c53f0b489cde8a52dffc86ac457cf6402a1bba

  • Size

    306KB

  • MD5

    60304b8e9348e2ddf5933e6ab8a3539d

  • SHA1

    5a131b0e4e9f80c68262b4b4df7dcfb1e3cb1b8b

  • SHA256

    14eaeb52e4ee63e83ac0c70a55c53f0b489cde8a52dffc86ac457cf6402a1bba

  • SHA512

    a7d6a1a69d1c4d588d22d55aae7a0a6b819cde4dd7c7d72d806a49d026bd6140e6a0edf17b57c49f3be0d83368478c077bda51663de092a411ce033243b5ff81

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 14eaeb52e4ee63e83ac0c70a55c53f0b489cde8a52dffc86ac457cf6402a1bba
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections