General

  • Target

    AppLaunch.exe

  • Size

    104KB

  • MD5

    006e7666628653086226ca1203d4db8f

  • SHA1

    ab37c0fb698f4d316260910f21f5a498bd359db1

  • SHA256

    b1b0137a9e18491dfae75e3921a47945a323486a6c9785ea050abcb2dc33e604

  • SHA512

    52afaa8181c53a2bd6db78bd97c38dea027c05214c1d841aab2ba274995c346bebf4f198c401af973b648ea8e856aba87ad1ad805fbdf91a79fb83fddbdfc072

  • SSDEEP

    1536:mh+zCvsP0XDcbYInTDEVgrj0y8WcWZWpVrR7lQSCbR2zbuMZEYCm+0wuei6ZLoD:rCvsP0XgUInt+SqVrR7l+eSrm+h/xP

Score
10/10

Malware Config

Extracted

Family

redline

C2

1.2.3.4:5678

Attributes
  • auth_value

    8b8bd0cb6300e0dea786123a0853916a

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • AppLaunch.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections