General

  • Target

    4a8101e1956883af240da9d3db7e9c20e46d0405cadd1a1f07e1e210b55cb8a3

  • Size

    270KB

  • MD5

    78124dcc28ed36fb7fa74b9c16aecd6c

  • SHA1

    56d0365416333ad02f5fcd3bcfb5ffee9a0b96b4

  • SHA256

    4a8101e1956883af240da9d3db7e9c20e46d0405cadd1a1f07e1e210b55cb8a3

  • SHA512

    816aa26f0bf37095254d260333a0a5d26a3cf1fb570f9616de3025f83be1e6bfdc3a94150d46aa443db6d972b1bb706459dfc11d3cadaea6af060efa298e306f

  • SSDEEP

    3072:xqFFrqwIOGBHy9MGSwTc425F7dw4AhTiNhdSCTZifjIxcZqf7D34leqiOLCbBO+:QBIOGf4259dnTZcscZqf7DIvLs

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

123

C2

185.215.113.67:40960

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4a8101e1956883af240da9d3db7e9c20e46d0405cadd1a1f07e1e210b55cb8a3
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections