General
-
Target
a918be065dd6e34201449b4b480d7efe031c6e1ddd2881595c857c8a7342cb1a
-
Size
222KB
-
MD5
48757b220ae3186f5c0df28dfefc5252
-
SHA1
5a37c4a82d71baf9f249f410e6c36166fa2f9e5b
-
SHA256
a918be065dd6e34201449b4b480d7efe031c6e1ddd2881595c857c8a7342cb1a
-
SHA512
6926fe088d2c1d1507d542b22b06bdb2007c6f790a65f4e06d7a257376de2a41e10d8a1a53c8eb7205972eba34d1fae034f0f7cbb565cb4b6367ccd43e6589f7
-
SSDEEP
3072:16+H4/nnNgcpS1moz+2/ZriggggggggggMv1t/q31Vyl/dpaEO8qrqv:E+HMnNgcpgmoC2/f/qk/dQEfqr
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
sq1
C2
171.22.28.224:19117
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a918be065dd6e34201449b4b480d7efe031c6e1ddd2881595c857c8a7342cb1a
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections