General

  • Target

    c7f63c88f378820947d6dce39e3495a2bbc9550ca5ceb6e00c2cabb602059382.exe

  • Size

    145KB

  • MD5

    8a99f530c362c5505e317697e90f6e98

  • SHA1

    050dff6f6cef53aa9dbb9d086ddbc653f27578ee

  • SHA256

    c7f63c88f378820947d6dce39e3495a2bbc9550ca5ceb6e00c2cabb602059382

  • SHA512

    ee3765fab8126e290c497fa8963978604355e6184bd3bac31ccbd856b613dc6956f063025d9dfaa734f01e16d7548e4df51f42a2391acc1fc771c62a92e4f78f

  • SSDEEP

    3072:nV+m5czQmRS9I6E24dl3CZz3FhRZG8e8hTt:njKmE2WcTFhR8E

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

masta

C2

185.161.248.75:4132

Attributes
  • auth_value

    57f23b6b74d0f680c5a0c8ac9f52bd75

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c7f63c88f378820947d6dce39e3495a2bbc9550ca5ceb6e00c2cabb602059382.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections