General

  • Target

    7c08f7757d28ecfb3fbe9b4610c4c3b23ca0ccc5c3e3de5d819b97be603e1205N.exe

  • Size

    176KB

  • MD5

    cf970b6c4340824bf9e7cf6eea9acc70

  • SHA1

    e81dbdae852b3c7c7c391cdf7351484e17f07285

  • SHA256

    7c08f7757d28ecfb3fbe9b4610c4c3b23ca0ccc5c3e3de5d819b97be603e1205

  • SHA512

    a4307e199a226ba77e48c71cee1c38adda230ad527ff2f8510f47b057d738fbf63de7ae21af118680f4ab75e8e1ad2b7d365e21efae884b6c7900fa2413f8601

  • SSDEEP

    3072:pxqZWzvagwoMR3I58ZlHeR5FthXfxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOb:bqZVY8qth

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

spora

C2

176.113.115.145:4125

Attributes
  • auth_value

    441b39ab37774b2ca9931c31e1bc6071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7c08f7757d28ecfb3fbe9b4610c4c3b23ca0ccc5c3e3de5d819b97be603e1205N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections