General

  • Target

    c00250a9030d1402d8ec2f115eb0a9d485629b93904adda470a89f6e6df6eff3.exe

  • Size

    175KB

  • MD5

    ebd5904210e226710015d25c1226cb1e

  • SHA1

    6dd56234ff99eafd43d5a92ec0ca35b987da724a

  • SHA256

    c00250a9030d1402d8ec2f115eb0a9d485629b93904adda470a89f6e6df6eff3

  • SHA512

    6a7c2656ccccea8a3537b299e4b40046d99debd9be78728cd98cf916a52a692d19b90b8d3aabcdbdbf6e459bf107dae78f8ee1489caf58a3f891aeec7c487cd8

  • SSDEEP

    3072:KxqZWJBaKULo3pfEWGljeerDF/hevTxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0h:4qZIpfEWYL/hkM

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

fuba

C2

193.56.146.11:4162

Attributes
  • auth_value

    43015841fc23c63b15ca6ffe1d278d5e

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c00250a9030d1402d8ec2f115eb0a9d485629b93904adda470a89f6e6df6eff3.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections