General

  • Target

    7081e613321921500b70899fddb56a4d.bin

  • Size

    116KB

  • MD5

    68669fffbed39a668812df9b7a13cc85

  • SHA1

    6b2f01745fe35ce631751b782733e3f39984eedb

  • SHA256

    26b6d66aaf57f6dd234f96dfa3cbb4e20751dabff431139edaab7182a5660f9b

  • SHA512

    7015197d1b3f1a7587df9844c7633859f4f8b9034ca6d289613688b2111a376df8aaf597123f3450f104552dc413d3f636da5c05bce95f7825cd55f83c6c1e35

  • SSDEEP

    1536:f0bo1ULgUeKYz+HVRepssK9Guex56CmOSTVSJ0j8Jb3H3ioN1chVb4P4u0oOt8qd:fVuLjPQss5hoTVSJ0QlCm4+Ot8qKJNw

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

1

C2

94.232.249.204:1912

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7081e613321921500b70899fddb56a4d.bin
    .zip

    Password: infected

  • 7c03173d3bd7a27e446d8fe70829b963942f746d933a9eab4d198d524b45cb68.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections