General

  • Target

    a1990384c00d610b165c55158799227708dcb7b22b93aa393ce163ff8dbbceef

  • Size

    306KB

  • MD5

    9dc2e875131f471ea202713ae0e91c1c

  • SHA1

    fdb2411bb737edd71920a3b314c758da3fe3b6a2

  • SHA256

    a1990384c00d610b165c55158799227708dcb7b22b93aa393ce163ff8dbbceef

  • SHA512

    34446f9afc8ddb1f7bd640d6bdbbdec3c7defd5d50e9b5c354c01d992eeedd5547d435a201bcdd39a0bb10e6b4f99492aa9a719c68dc5e22dec9791616920cc5

  • SSDEEP

    6144:/qY6irwP7YfmrYiJv7TAPAzdcZqf7DI/L:/nwPkiJvGAzdcUzs/

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spoo

C2

103.113.70.99:2630

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a1990384c00d610b165c55158799227708dcb7b22b93aa393ce163ff8dbbceef
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections