General

  • Target

    build.exe

  • Size

    300KB

  • MD5

    d0fbb4491901f176b0ef3bd4ad31a0c9

  • SHA1

    0288dc871936df948148cb8d86682aac442d9cdf

  • SHA256

    e03509d92cc897f4ba6c5d68080f43ef3bd6f0d9747505cd15ef1d75db4b9d77

  • SHA512

    5d1f7b8f235c948fbf009c08a54cb1750a7ffbfd38ad7889a7a03256933527a7a52cc3d79de947e8c5265344d2a9fd615f685ab4b289475e7dc45041ec0875aa

  • SSDEEP

    3072:ScZqf7D34bp/0+mAqky4kBQIgntB1fA0PuTVAtkxzF3RkeqiOL2bBOA:ScZqf7DIFn0m1B1fA0GTV8kvML

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

2

C2

80.143.43.131:1912

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • build.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections