General

  • Target

    44a72dd537e4d962182274e5aaf1ceab8b4257423ca227da09046dd5ebf570ce.exe

  • Size

    300KB

  • MD5

    f757a48140aeda983a398bdbef582204

  • SHA1

    36043de01e8f923569510016dac47043b1160fb0

  • SHA256

    44a72dd537e4d962182274e5aaf1ceab8b4257423ca227da09046dd5ebf570ce

  • SHA512

    a303d8de491c4965f7e2e1e346f94d389c1a5a4ec96bdf516a97429eb445e655cdbb971706097548462c7e589f3ca4b038aad0cd2d99e00826cca559cb80e1dc

  • SSDEEP

    3072:+cZqf7D34xp/0+mAQkygx9QEgJ/B1fA0PuTVAtkxzQ3RQeqiOL2bBOA:+cZqf7DIjnH6lB1fA0GTV8kywL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

foz

C2

84.38.134.17:1912

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 44a72dd537e4d962182274e5aaf1ceab8b4257423ca227da09046dd5ebf570ce.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections