Overview

overview

10

Static

static

10

___.exe

windows7-x64

10

___.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ___.exe

  • Size

    300KB

  • MD5

    f0d19a794d0a89ef98487930e14375d8

  • SHA1

    6345a936d5ebca27dd373276c1c25ca8b6c0f312

  • SHA256

    d7ba8fbb2f3acaf0d58d9d1ccf0f7ad481ebe89ff8a97ee84b444fafd2fe1472

  • SHA512

    ebf302a49a861aa9f3ea4817a9fc402ce929b7317fd3eb11c71ac50a716483595672b4c01536139fca1055d2d401edbf80d45130f2a337d97e88ed8cb8c40baa

  • SSDEEP

    3072:fcZqf7D349p/0+mA7k5qrSP/grXBofJ0OLCTVAtkxz830keqiOL2bBOA:fcZqf7DInn5WaBofJ0O2TV8ku7L

Score
10/10
1234redline

Malware Config

Extracted

Family

redline

Botnet

1234

C2

109.111.167.229:1912

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ___.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections