General

  • Target

    7954f72e41eb5aa0aab3bb26a9685028df34785d80c933ab5a25a2f9cfac8756.exe

  • Size

    300KB

  • MD5

    ed7f2235afe53e615bfc5e9226d79407

  • SHA1

    1f7e7a32c016388d5d6569af62a74a44b3b147ce

  • SHA256

    7954f72e41eb5aa0aab3bb26a9685028df34785d80c933ab5a25a2f9cfac8756

  • SHA512

    baa191ed8ce7683b7b7c410f487bf7c1ef606520625dcaeeae6a53b71f5fc6d769ad8bbf109660e2b5082f4f6e00ca5458b936689ca727c338f57eaa607800fc

  • SSDEEP

    3072:ScZqf7D341p/0+mAMkywUQQ0gnvB1fA0PuTVAtkxz/3RkeqiOL2bBOA:ScZqf7DIvn6jDB1fA0GTV8kRML

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

1845

C2

198.49.23.144:4402

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7954f72e41eb5aa0aab3bb26a9685028df34785d80c933ab5a25a2f9cfac8756.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections