General

  • Target

    build.exe

  • Size

    300KB

  • MD5

    8ecee276532202447fed8eae541ec71e

  • SHA1

    c382af093856b672ba10acd334c0877d36257bc5

  • SHA256

    a8946abc4f6e651a28514c77d15ff62093dac9a0f9c5f11715bfbbcec6b6489e

  • SHA512

    9e6ca277c98a81e0f981a7612a8d0836253380ae5851ded1eadf37434b7f0feb9a2e9c082b8df5bef0e25c8542de1ac9725f78ba0554f3ceb2a1ceac6a96bb3b

  • SSDEEP

    3072:OcZqf7D34dp/0+mAgkygggQEgASFB1fA0PuTVAtkxz23RgeqiOL2bBOA:OcZqf7DIHnSThB1fA0GTV8kMgL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

333

C2

147.185.221.21:38519

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • build.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections