General

  • Target

    66311884cfdc6a58d4c4c7831e495d98a9028cd71dbd2d5b2decfc69b5e7869eN

  • Size

    304KB

  • MD5

    e4cf3fb058f3af75ac052cc22b1b0500

  • SHA1

    9e01a28bc2841acea1e34c58adfc027dbff8dda1

  • SHA256

    66311884cfdc6a58d4c4c7831e495d98a9028cd71dbd2d5b2decfc69b5e7869e

  • SHA512

    d8c41d6ee77074a423477e1d7057c18a0df34a68fbfc72b748d4425e8079ba679f30616de434b4c699b9ea170fbfc35460ff277f0fcfd5d78f90ee296e4802c1

  • SSDEEP

    3072:Eq6EgY6iIrUj1Np/wPGnGS+bAsoTAotRSKx5cZqf7D349eqiOLibBO5:vqY6inwPq1soTA0R35cZqf7DIHL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

unique0109

C2

185.215.113.67:21405

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 66311884cfdc6a58d4c4c7831e495d98a9028cd71dbd2d5b2decfc69b5e7869eN
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections