General

  • Target

    bbe7d217858bcaa0085bb014ac0946930f08b0cb661e9011796beac5320fffb8

  • Size

    363KB

  • MD5

    6d2f3c822aa6280e22fbc3a017f8444f

  • SHA1

    67b42ed303cf9e92c511d8268d8a6f606d503cbb

  • SHA256

    bbe7d217858bcaa0085bb014ac0946930f08b0cb661e9011796beac5320fffb8

  • SHA512

    f41bf048fb6250d5ca20b2d53d82b5f8e49c8761e22f742ce3ffc16195fcec3ab115266ba84e284e180a5f538bb03f7d3647ec29a3da47fcc2c06af939079ed4

  • SSDEEP

    6144:eEaXBUcN2BRrn1fH0N6GkBut5adsSEK69yDPhSjYlakxjTLVqoARRSTZAPdg+:/aRDNoVJKRtUdsSEK69yDPhSjYlakxjv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0002

C2

13.72.81.58:13413

Attributes
  • auth_value

    866ce0ed8cfe2be77fb43a4912677698

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bbe7d217858bcaa0085bb014ac0946930f08b0cb661e9011796beac5320fffb8
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections