Resubmissions

23-05-2024 18:30

240523-w5he2abh3s

General

  • Target

    0ac330d0fe56ce2f8405bc53cc2ac7196f7afb41dec406e33e24b643174ad22d

  • Size

    145KB

  • MD5

    c38af5cca781bcdf1b81b6ae5f1a82da

  • SHA1

    6843003d5cf7b052969f82bc79ec3258a170a3e1

  • SHA256

    0ac330d0fe56ce2f8405bc53cc2ac7196f7afb41dec406e33e24b643174ad22d

  • SHA512

    096dcde790012929dc1b98b3305849a8fa9a57896d0d0c2a16cd13631b053c2efb320afcfd624d5b6876a0081b58beaf810db3015f8ac1de37a3796f1a75d3e6

  • SSDEEP

    3072:PV+m5c1QmRSxHQUb9q4lET/sDhRZe8e8hn:PjYsq4XDhR0

Score
10/10

Malware Config

Extracted

Family

redline

C2

135.181.10.136:4328

Attributes
  • auth_value

    a909e2aaecf96137978fea4f86400b9b

Signatures

  • Detects executables packed with ConfuserEx Mod 1 IoCs
  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ac330d0fe56ce2f8405bc53cc2ac7196f7afb41dec406e33e24b643174ad22d
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections