General

  • Target

    f3c118ec4435ca5120a883e9f24d4b5966ef9d37fb16e03568d03a2dc282025e.exe

  • Size

    220KB

  • MD5

    49913c7c5a170e4c3a29f64279f13fde

  • SHA1

    6400519d636931e5e9737937935ae046d669cedc

  • SHA256

    f3c118ec4435ca5120a883e9f24d4b5966ef9d37fb16e03568d03a2dc282025e

  • SHA512

    8b1b87eef6cc7a731be29e9f9c52de7fedbd27862e01a7ee435a7cdc7c73661ef659f3574444a09787ddf110de7cd7c7201324471b96fec3f06d7ac1d6a24281

  • SSDEEP

    3072:ycZqf7D34Tp/0+mA0kywMlQEg85fB1fA0PuTVAtkxzt3RH:ycZqf7DItnGCQNB1fA0GTV8kj

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

123

C2

135.236.96.237:1912

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f3c118ec4435ca5120a883e9f24d4b5966ef9d37fb16e03568d03a2dc282025e.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections