General

  • Target

    43bb74594b52e22b8ccc6dcd764ced861d3ad53b2b5e3b143169f205839ce84d

  • Size

    300KB

  • MD5

    5f010d1f3217e309b318e29a01fd17fe

  • SHA1

    8a83579ffec04ed443cc3f5714dcd380209e496b

  • SHA256

    43bb74594b52e22b8ccc6dcd764ced861d3ad53b2b5e3b143169f205839ce84d

  • SHA512

    ff13311249a3417fa5ebf3b9f3af23dcfb8a974a42fb7aa031371a368cfcbbb53c6c147c7771affd8f94d05e3b6e7a06933b9b0996035803f1db3129b3c001f3

  • SSDEEP

    3072:ecZqf7D34Gp/0+mA2kyYssQQgg9B1fA0PuTVAtkxz/3RkeqiOL2bBOA:ecZqf7DI+nAHcB1fA0GTV8kRML

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

-by_parts

C2

phones-prevent.gl.at.ply.gg:44101

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 43bb74594b52e22b8ccc6dcd764ced861d3ad53b2b5e3b143169f205839ce84d
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections