General

  • Target

    ed5744237845a893ba56511e891128781d3eaa60d9662ee2cce6e38dc6db5b93

  • Size

    272KB

  • MD5

    79afef7bf7013f0508405655daa98881

  • SHA1

    738777ffded0dc714ff4e7663e8e1bf69e3d2d0c

  • SHA256

    ed5744237845a893ba56511e891128781d3eaa60d9662ee2cce6e38dc6db5b93

  • SHA512

    55e9e1d5710f03bc84e6ad2a95d08c4595a10ee38cc25e7a713a7743ec830597c2cc06fa46199048dc53ac9a323b892d98b70c921368f1ed5c3d7ee4a5f21bd9

  • SSDEEP

    3072:p6j4ELH6Vt7CENpmh6sLKR+utY/edHbpiWo40mTJghm0nlQoYKgQmExNn2pU9f20:p6jgppZsLKwuAexbpZghdnlQH5Q

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

romik

C2

193.233.20.12:4132

Attributes
  • auth_value

    8fb78d2889ba0ca42678b59b884e88ff

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ed5744237845a893ba56511e891128781d3eaa60d9662ee2cce6e38dc6db5b93
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections