General

  • Target

    041bf8121f0b162298d5586cb420fdf5fd09b9fb8b497906f8616e53a76607c7

  • Size

    94KB

  • MD5

    5cc66fc0009faaa302fe725f58972c36

  • SHA1

    8cfb1792385ac13ccd796134bf0ca6f900a44979

  • SHA256

    041bf8121f0b162298d5586cb420fdf5fd09b9fb8b497906f8616e53a76607c7

  • SHA512

    3cde9ebaecfa21258b8f84bf59ffb63d03e326dc8cac3325996d2cf0d37878229a90d5789d7c1aaf17bf4cfd2f945805aa231d5cc6231f1a8fb16eb76acb8b8d

  • SSDEEP

    1536:9ATp9NZjE6oljj9tAtzZM4YCrB/atqgdbibEB/l2kPoSG2:9ATp9DOjj9tA5C4JJatvqEhfr

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

5129512298_99

C2

https://pastebin.com/raw/tnW31tPp

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 041bf8121f0b162298d5586cb420fdf5fd09b9fb8b497906f8616e53a76607c7
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections