General

  • Target

    0x00080000000122e6-1063.dat

  • Size

    175KB

  • MD5

    331d5b6191415859e30f9bbaa2d71d8c

  • SHA1

    93de412fd8a435f9740ade423fd7360875703c6f

  • SHA256

    f025de41ee486149c38f33a08cd8cf7b95a89edba27c92d68fbc2addd137faf5

  • SHA512

    d6abf5645814346f3eb6ec3f7a8b9d587454ac65f6edcfb81426e5bedf5de126c9856c95a03db4b0a88002031db6e31c28166524d1a4c31441b565c880e79bc4

  • SSDEEP

    3072:WxqZWZRanU2n0rZaJKd4/eo5YYh8TxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jz:8qZgrZaIqwYh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

nord

C2

176.113.115.145:4125

Attributes
  • auth_value

    ebb7d38cdbd7c83cf6363ef3feb3a530

Signatures

Files

  • 0x00080000000122e6-1063.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections