General

  • Target

    0x000900000001230f-55.dat

  • Size

    95KB

  • MD5

    ff9794ea7f869383e4b236a2428063ab

  • SHA1

    32e872f7a8ac57f6891cc468ef5a52afe56fe150

  • SHA256

    96454cc2da89b6418878adf53066ff3c5a57304f4e608a5543d1dd1cffb91950

  • SHA512

    f190e187ddec860ef3ec2520e27c872d0bca2ce2ffc2fa94196861efbdb44d51e7abdae818cb12874c829e13fef08971a6bb9e3e532062f516f482393356ece3

  • SSDEEP

    1536:9qs+XqrzWBlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2ntmulgS6pY:r0gzWHY3+zi0ZbYe1g0ujyzdvY

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kmzzz

C2

146.19.215.3:35361

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family

Files

  • 0x000900000001230f-55.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections