General
-
Target
e74b5e368149f5c103feb2ad33a2267235a4c13bf3e3fdde5b956ab827b3de34
-
Size
172KB
-
MD5
5ab9020c587ea4e5edf9e9d4097243da
-
SHA1
fe95d868be7ae298c0bb7229667ce02af15ef199
-
SHA256
e74b5e368149f5c103feb2ad33a2267235a4c13bf3e3fdde5b956ab827b3de34
-
SHA512
047aa57cc15e13741f19f0e215d30ce2d1a60ec2ed38c9099fa29d9aed86ec036a2d45fc1b1d23d0a45302f7832aab37d518bbce59dc0cec7477564af9c84565
-
SSDEEP
3072:T+CgncfnivAgLNbcxNdydiyM4ROkmn8e8hx:Tv5hsKmM4ROkmn
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
sheron
C2
83.97.73.129:19068
Attributes
-
auth_value
2d067e7e2372227d3a03b335260112e9
Signatures
-
Detects executables packed with ConfuserEx Mod 1 IoCs
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e74b5e368149f5c103feb2ad33a2267235a4c13bf3e3fdde5b956ab827b3de34
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections