General

  • Target

    build.exe

  • Size

    300KB

  • MD5

    a30058fb76d0fad3ff6479e562a5a2a4

  • SHA1

    a3785779c19834058db9a073e7a26339e58c5828

  • SHA256

    62c1f7ebe9f11cb268d4b305e52255a2ad4c93db6910c4c2a71517598760d2d0

  • SHA512

    a7f094dd63b44f1c486da7507fc0ef7bee335e896d1857087cdc1ac21009bfd412a2eceaf9b59e3a6a3b5efec7e43c404eff6cde8db3e4d24437cd71626fb962

  • SSDEEP

    3072:acZqf7D34cp/0+mA0kywMlQEg85fB1fA0PuTVAtkxzs3RMeqiOL2bBOA:acZqf7DIknGCQNB1fA0GTV8k20L

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

555

C2

45.141.215.215:1912

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • build.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections