General

  • Target

    build.exe

  • Size

    300KB

  • MD5

    b48d197ae3b98530b79fd73bba911b3f

  • SHA1

    3107ecbbc4e0452e412a7aa6d620f4e879755171

  • SHA256

    bcf1359a1060b4ea7314078de056e39c917f692df3220354ace53adbe527e5af

  • SHA512

    5b4a5a5625513547bcc9c7dd13a1da88dc9bc9d48b5001b0903312eb37070226e64e8f40f24183ca409fcd9cc2dc7e9e65dfd367d39dbe9acea3c17592c8653f

  • SSDEEP

    3072:KcZqf7D34rp/0+mAokyOp/wQkg6EB1fA0PuTVAtkxzO3RceqiOL2bBOA:KcZqf7DI1nHJDbB1fA0GTV8kEkL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

1

C2

love-illegal.gl.at.ply.gg:65033

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • build.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections