General

  • Target

    f327d8964cfdb2a5d63318ebb69b8d61498af1620f6785a2c3f9592990a67aa1.exe

  • Size

    297KB

  • MD5

    350292ff12ebe29fc711a05b2b38dc4a

  • SHA1

    dfe44068b8f777229704ce23ebdbf5048f0d76fa

  • SHA256

    f327d8964cfdb2a5d63318ebb69b8d61498af1620f6785a2c3f9592990a67aa1

  • SHA512

    c6f513eeda89ac34278d06a22c028a6d452c8d6f0b87c1576b47be035db6e2fcbec6f1654f251e8f8e6852b20386ecf5f3d9de163037c511cbb37ecf1b5dc04d

  • SSDEEP

    3072:MqFFrqwIOG7ly/FSe/DSe71c/2T02TqhdkHTZLUHIIcZqf7D34teqiOLCbBOr:HBIOG8V7idwTZYdcZqf7DIXL

Score
10/10

Malware Config

Extracted

Family

redline

C2

38.180.204.127:17052

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f327d8964cfdb2a5d63318ebb69b8d61498af1620f6785a2c3f9592990a67aa1.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections