General

  • Target

    123b6e54339408a506eded327ce29d213590b305438d960c394c7380ae04876a.exe

  • Size

    187KB

  • MD5

    4b6ac2b872e0a99d9ebc7eaf5ebea2c4

  • SHA1

    b19477c255b0582914a3eab0796fe518e38e8bd0

  • SHA256

    123b6e54339408a506eded327ce29d213590b305438d960c394c7380ae04876a

  • SHA512

    fe18b92bf3d94278ac5e56d5ce9e6fc2a2285e94b4b3840a65855bb943eea387197f050b39109f0ea666c84febd31ca7ce43b680f0167d378f2ae97d676bb2b0

  • SSDEEP

    3072:XcZqf7D34Tp/0+mA0kywMlQEg85fB1fA0PuTVAtkxzt3RRm9:XcZqf7DItnGCQNB1fA0GTV8kj

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

123

C2

135.236.96.237:1912

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 123b6e54339408a506eded327ce29d213590b305438d960c394c7380ae04876a.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections