General

  • Target

    0x0006000000014bb5-1068.dat

  • Size

    175KB

  • MD5

    9a19339918e25476f53a6da6e94b218e

  • SHA1

    349e8fcf0a6d6d79f34645add03984250c50fe29

  • SHA256

    adba4b11021c724616ac70dcee1f7497b97826021a06044568069c9c21f10f25

  • SHA512

    fcfa33e3c0cdd4390b733204452b080dc21629eb61962e5be6ca5a67d15b3d9e8048c8012b4c8d6f74ef0903769d132835b40682612b3174d97ff202dcb574ae

  • SSDEEP

    3072:UxqZWZRanU2n0K56dWfex5FGhyTxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuM:qqZgSSbGh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lift

C2

176.113.115.145:4125

Attributes
  • auth_value

    94f33c242a83de9dcc729e29ec435dfb

Signatures

Files

  • 0x0006000000014bb5-1068.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections