General

  • Target

    0x0008000000013397-1002.dat

  • Size

    175KB

  • MD5

    93035cd5409371adb2ce58364e72e6f5

  • SHA1

    3931bb28bdf3ac8aa5c2449f9e8d7c212014c9fc

  • SHA256

    8bfe2ca1117d46064c25eeebe2dff4d2b017e49ef1ccb5e24ea1e92e103e5930

  • SHA512

    213626d207f7b483eae11dea0df0b9af2f1aa71ba71039e31a29d8bf7da63dee941fd3facc09fd8aca9b771481818a0a528b0735adb653befab29e6383bccb34

  • SSDEEP

    3072:KxqZWJBaKULo3pfEWGljeerDF/hevTxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw09:4qZIpfEWYL/hk

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

fuba

C2

193.56.146.11:4162

Attributes
  • auth_value

    43015841fc23c63b15ca6ffe1d278d5e

Signatures

Files

  • 0x0008000000013397-1002.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections