General

  • Target

    61837be693d4cc1d96e946297e291add

  • Size

    363KB

  • MD5

    61837be693d4cc1d96e946297e291add

  • SHA1

    6ed39a15e24c2ef1876b5eb0b5869415a1708f77

  • SHA256

    23697a61f3b3dce35f21d363cdde98f567de97b30bf5e7a9cd7977db7b14a069

  • SHA512

    6abaaa5981ceb29cfb03dc3de2de5788b7fbba0edd946ecf72d5469e4390aba9d825cadb9e319eeec25a22ff74721e6ebb1da4efda808f945c941f57340be27e

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 61837be693d4cc1d96e946297e291add
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections