General

  • Target

    e96c8e66cc8bed73e49c8ee4c6171a03ed2040c8ff646c29fffba36655ad27b0N.exe

  • Size

    169KB

  • MD5

    aa8f0056e86ff8f5143debd896b52770

  • SHA1

    7624468cf54650a011319fbd832831d16b99c347

  • SHA256

    e96c8e66cc8bed73e49c8ee4c6171a03ed2040c8ff646c29fffba36655ad27b0

  • SHA512

    582546a4ddd1154f4e9c09158cd306466f6d4bf59a345ed59b29e60f9c107eb989e4c000bfb801323a6af670bef18dce0ebfcab712571e09501328005a239aba

  • SSDEEP

    1536:19FKuQhqlVZRGWWwZrC3T3AHHnpX9rQTGqVIbumugSeIsfcNm83wYk08e8hk:1jPQN93rUpXbqV4MoIsfcNmC8e8hk

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

dante

C2

185.161.248.73:4164

Attributes
  • auth_value

    f4066af6b8a6f23125c8ee48288a3f90

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e96c8e66cc8bed73e49c8ee4c6171a03ed2040c8ff646c29fffba36655ad27b0N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections