General

  • Target

    build.exe

  • Size

    300KB

  • MD5

    fa7eb51a399cb102e64ec47c40ab152c

  • SHA1

    7ef399616983a4ea4b958ce2c805adac5f068b50

  • SHA256

    4d70f7c851f92a4a4b620c4bbdbc55c5901720b2f7af0dc6b0f3ac1f92dbd1d0

  • SHA512

    1a29537e221c0db84bd77f1122ea619876f291ffce002ffe59d0a3ef3b0f00c97b50abfa51b64125034898788a63206be074aac8083771fc059a10d41075d98b

  • SSDEEP

    3072:ycZqf7D34up/0+mAskywdgQ0g2RB1fA0PuTVAtkxzy3REeqiOL2bBOA:ycZqf7DIWnTTKB1fA0GTV8kssL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

test

C2

finance-lot.gl.at.ply.gg:36936

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • build.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections