General

  • Target

    e460fc38bcd84b61a7b4d5d8d43b4157eb50eaf0c2a7ce63848edb29a2b49b31.exe

  • Size

    175KB

  • MD5

    fcb031ba8a29edd48511d6cd737514ad

  • SHA1

    9014e8eb72438b587a99a4adc398427172ebcc75

  • SHA256

    e460fc38bcd84b61a7b4d5d8d43b4157eb50eaf0c2a7ce63848edb29a2b49b31

  • SHA512

    8087f74a6b337d10e9d8c626350ec99987268be80592ee07dce183d0981e0926741be8e236d301fef7bf5872cff4cf3d8bceccf5700aa88a4db543711374610e

  • SSDEEP

    3072:sxqZW11a2kX8f516fTKev/FThwrxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuV:CqZk516LTTh7

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

dogma

C2

193.233.20.32:4125

Attributes
  • auth_value

    1b692976ca991040f2e8890409c35142

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e460fc38bcd84b61a7b4d5d8d43b4157eb50eaf0c2a7ce63848edb29a2b49b31.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections