General

  • Target

    22a42f72a83cdd97c47fffe53311a9dd7acb213acb809e1106f6f1ebae37cf47

  • Size

    172KB

  • MD5

    542728b0adfdcd5734bdcb99a2f605cf

  • SHA1

    29c57a009b0af644a059644fc08c13e770f14bbf

  • SHA256

    22a42f72a83cdd97c47fffe53311a9dd7acb213acb809e1106f6f1ebae37cf47

  • SHA512

    046b50fd457f98999a5dff716abfd5f6871083a74dcf667b370ed6fdcdd9f7a7bd0ab6f3ac671ef0c13bca8a21a32a843c703d58adbdad1fbf1e8a63294a5f24

  • SSDEEP

    3072:FqaJm74qpXtmOnJjBawT253uaxfKfVvXgDOL3DhpPL0F0JCb3O3Cb3hRsRQEcC8X:1sfHvcyh

Score
10/10

Malware Config

Extracted

Family

redline

C2

45.15.157.131:36457

Attributes
  • auth_value

    e7bf901b8e6b088c010d95efb1cecee1

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 22a42f72a83cdd97c47fffe53311a9dd7acb213acb809e1106f6f1ebae37cf47
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections