General

  • Target

    f03d12cadb70aa5f2d93285bf541f8a02e4fe24c574d7eb5062c693cfb6fc076.exe

  • Size

    300KB

  • MD5

    901969f80acf800e522c7e2e73840e22

  • SHA1

    de89bca939c5674b3afca2eaa34f2e578b3f9c84

  • SHA256

    f03d12cadb70aa5f2d93285bf541f8a02e4fe24c574d7eb5062c693cfb6fc076

  • SHA512

    12879e31390b6a4c074fefdaff426efb43b82e478de9d29aed1e0a1a5e6e1bfe1987789274c178b2f44be5951cac7b77845c4532783acafb753849a440b71ab5

  • SSDEEP

    3072:+cZqf7D34xp/0+mAQkygx9QEgJ/B1fA0PuTVAtkxzx3RQeqiOL2bBOA:+cZqf7DIjnH6lB1fA0GTV8kXwL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

foz

C2

84.38.129.21:1912

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f03d12cadb70aa5f2d93285bf541f8a02e4fe24c574d7eb5062c693cfb6fc076.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections