General

  • Target

    9146ddf27e66cac77b843cdc81991c49.exe

  • Size

    304KB

  • MD5

    9146ddf27e66cac77b843cdc81991c49

  • SHA1

    9beaa67864a04822c374bde867db18671708bc9a

  • SHA256

    5913ec84369b5769c39bb17281ede29c99c5bf8ef78c23075640df40a92b1f31

  • SHA512

    368005fae3a4e10fc08c94aa41d2fa28e3b89ce80703a76a86d1706ece8f731a6c8a8c652bfa6a348f62935108126b7683969dfc1977cc29916f1cd79a6191b5

  • SSDEEP

    3072:wq6EgY6iYrUjL849wPzoSsT0TAztASiYlcZqf7D34teqiOLibBOu:zqY6i3wPXsT0TAZAilcZqf7DIXL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

cookie

C2

185.218.125.157:21441

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9146ddf27e66cac77b843cdc81991c49.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections