General

  • Target

    0x00080000000230ea-1179.dat

  • Size

    175KB

  • MD5

    355728139f0375e7c8e6a52a797dce16

  • SHA1

    eb4c18a500e3406a6e1fce8d31585e7e45fa8e28

  • SHA256

    8e88e5ac87edee1ae8bdf18ecc26cab3a920a425052603a107286b684d608bab

  • SHA512

    424f1ff48a7a4001b95dfd219776dcceb51ee0a0d55b61f60abb54dfd7c96947c53e40310719af36b3b6d3126cf7ca2d8b568f0969b691dc2fc5e168708ea074

  • SSDEEP

    3072:yxqZWDfnaxIF63WUX+BJe5bF+h3HxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOh:gqZcmWkUM+h

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

fomich

C2

melevv.eu:4162

Attributes
  • auth_value

    b018e52ac946001794d8b8c23e901859

Signatures

Files

  • 0x00080000000230ea-1179.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections