General

  • Target

    1614112626.exe

  • Size

    300KB

  • MD5

    9fcef430b534fdd1fb9c57f674cc5d01

  • SHA1

    e0f01b9eaad8f91ecd8cb3584d54d9c5cc202ecf

  • SHA256

    5072f52e5481ae5113ee234e77167d861f7f10eb0b4400a2d61dd5a169a3d913

  • SHA512

    aa2e6ac8399d49711e2159a85a7712d2a1852ab8242324aafa06a8ae238ac7909fc6306b325612054bf67626fd78f8eb0474f44c179f850748ec9d7130f1f4be

  • SSDEEP

    3072:OcZqf7D34bp/0+mAgkygC+QQEgefB1fA0PuTVAtkxz/3RgeqiOL2bBOA:OcZqf7DIFnY+joB1fA0GTV8kVgL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

1614112626

C2

85.192.20.120:9999

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1614112626.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections