General

  • Target

    b69037a6cba7dddd7ec97a5af249e6776f0b432ef9ad04a825c9df0ced7f9d88

  • Size

    221KB

  • MD5

    4b8ccdb549d6490a90948fce3886c722

  • SHA1

    fb09d13fa019a4316770e4ce8a845fa1aee9038c

  • SHA256

    b69037a6cba7dddd7ec97a5af249e6776f0b432ef9ad04a825c9df0ced7f9d88

  • SHA512

    9b3743b414ced47c0faa98720f776fd486b43318ea8095f789ff1436b7d5f04ffa5b8bb5f0c59b1aa50c61e670a07cdb1fbb0eea376b83832b79517620c03fa6

  • SSDEEP

    3072:szf+F0odnFNgcnWYGO/2Fhp+Gt/qYLIkZ79F9tDonob8:IWF0CFNgcnhGO/Sj/3IkZxzFono

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

sq1

C2

185.254.37.67:20454

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b69037a6cba7dddd7ec97a5af249e6776f0b432ef9ad04a825c9df0ced7f9d88
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections