General

  • Target

    build.exe

  • Size

    300KB

  • MD5

    974e76d4b0ddb3706cf174819d200516

  • SHA1

    817b8c7fb6be6a2cff1d8ac17a24a0c2f257f97b

  • SHA256

    d60599eb61f2653e184831a7086cdaa3195fd6845f6b57acb4b319deb46c5af8

  • SHA512

    9f9b8c9acbde28c9adce8ce1429e2182de0eae970f60267e2f2f0f5f498955a3f90f476d722a15b7f9c53229540906002ce8d8bd697f70591bd86495708a0212

  • SSDEEP

    3072:6cZqf7D34Wp/0+mAUkyw/GQEgzwB1fA0PuTVAtkxzV3RseqiOL2bBOA:6cZqf7DIunh9oB1fA0GTV8kjUL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

test

C2

people-climbing.gl.at.ply.gg:54251

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • build.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections