General

  • Target

    a976381b654aecf1a66b206bdaf74243321b4c67fd42079181efedc09665410e.exe

  • Size

    300KB

  • MD5

    a232b15dd85ec2b60276d31846d30adb

  • SHA1

    34b8407e5cb4d6acc1e032619474c6099f73bf93

  • SHA256

    a976381b654aecf1a66b206bdaf74243321b4c67fd42079181efedc09665410e

  • SHA512

    66e4e0989cb4a7bdb0be69da808283fc719334de8d7446f4c4452bc73026e47d5458134a518123c71b89f211c5c28c4f0eb4e55cc341dabb7e7903fbdfb4cbfc

  • SSDEEP

    3072:GcZqf7D34Tp/0+mAYkygYdQ0ghnB1fA0PuTVAtkxzO3R4eqiOL2bBOA:GcZqf7DItnGapB1fA0GTV8koYL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

Azure

C2

103.211.207.57:1912

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a976381b654aecf1a66b206bdaf74243321b4c67fd42079181efedc09665410e.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections