General

  • Target

    c545613ca9cb5996a9eb03204d7a9fc16f35e25f71c0020c217df51a393b600c

  • Size

    304KB

  • MD5

    a7faa38b05c649d15d6a094801ffd107

  • SHA1

    468af27e1ba12979d3362c62075510dc585052ff

  • SHA256

    c545613ca9cb5996a9eb03204d7a9fc16f35e25f71c0020c217df51a393b600c

  • SHA512

    99aec4dbd5144f27608637aa29ff07b02b8a471ee276ca11ef5a8ddb473e2dcac6bec9de56e777b3191ff33cf1b78fbdda3018480704df6296c2c4ca222a8c17

  • SSDEEP

    3072:0q6EgY6iArUjqek1wPkNBYyY1kCfCTA7tAEKZ1cZqf7D34leqiOLibBOm:fqY6iAwPKJY1dqTAxA11cZqf7DIvL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

I buy catan

C2

185.215.113.9:12617

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c545613ca9cb5996a9eb03204d7a9fc16f35e25f71c0020c217df51a393b600c
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections