General

  • Target

    f8132c36a49514f4e7a273887df672371ce434490ddfb0caea22ffc181da3065.exe

  • Size

    200KB

  • MD5

    a92b4181050bd6817fac2e0da609e407

  • SHA1

    1a361d5b94e1f09f1b0bd4a4b9c07c1b2f2a88bd

  • SHA256

    f8132c36a49514f4e7a273887df672371ce434490ddfb0caea22ffc181da3065

  • SHA512

    6ce4994183ac9e1d4710451740b4af14b356d9dcf9d2506c51295d51f492b9dab4b629d534e9414a425a85f801bb75eac66c476c1b43f8aaeaabd1703e22d0bb

  • SSDEEP

    3072:fcZqf7D34ip/0+mACkyIycQQgILB1fA0PuTVAtkxzT3Rv4WI:fcZqf7DISn6XuB1fA0GTV8kRN4W

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

1

C2

77.105.164.16:1912

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f8132c36a49514f4e7a273887df672371ce434490ddfb0caea22ffc181da3065.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections