General

  • Target

    build.exe

  • Size

    300KB

  • MD5

    c99fcec5c215951958a2fb639baec1ed

  • SHA1

    1b6383c89735f89067ccb822b054c1864c0cb0e9

  • SHA256

    ec872c33252f4118576c612f88b750cd2f4834ede3474a543b87f5bcd59e9286

  • SHA512

    cd0ee6711ccc8b33dd1ee2f9d4a8b59a003a887ad4da77cb461f00fefd06fa97eda3415d64f993e8a12952c1bf60ae77ff3780a4f891bbd214c7e534c7d36967

  • SSDEEP

    3072:icZqf7D34cp/0+mAGkyYaxQwgrRB1fA0PuTVAtkxz93R0eqiOL2bBOA:icZqf7DIknm2lB1fA0GTV8kL8L

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

negrik

C2

193.233.255.34:1111

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • build.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections