General

  • Target

    b1309d691e19475051caa2f1346d2f7a23706bca559852d8c420f3f8fbcb557f.exe

  • Size

    297KB

  • MD5

    6e1166af854364a8668e80049abf4cca

  • SHA1

    0832bab61321ec1b2998e7dc99b807c5d51ba5b7

  • SHA256

    b1309d691e19475051caa2f1346d2f7a23706bca559852d8c420f3f8fbcb557f

  • SHA512

    97074c4441dc487b8d398008537ad6f6e77a5c90a75277e76b59a2c785b47e61ec313c9f946c14d5689c2463e1604baaec18a72e37ec098feece9d29d5e6f3a5

  • SSDEEP

    3072:hqFFrqwIOGdTypEmz07s6iCa5hWi/ML6QuhdjETZ2fHgycZqf7D34deqiOLCbBOJ:ABIOG6OiWadATZQzcZqf7DInL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

xXx

C2

185.236.228.125:15140

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b1309d691e19475051caa2f1346d2f7a23706bca559852d8c420f3f8fbcb557f.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections