General

  • Target

    0x000400000001da5e-2334.dat.bin

  • Size

    169KB

  • MD5

    4ea7b47da0a32256b398856128781f82

  • SHA1

    516b534d2f17d9cd90166d57faacc9ebac03eb30

  • SHA256

    6c1aea1052431f1e043f3906997c3ad6c0d7289263d727c3d6e899e1c2215e98

  • SHA512

    5395725958bf0c7b5ca8b86e12dc0e76081ed06fe94f64a7a47ed843e11da7adac804116105114eca45a821ebb38c10736e36566c08779c9f2c563325f0dd12a

  • SSDEEP

    1536:ncJK7qlVZRGW4XqrozC3iGOmE+lrcI2nBCTGqV8buV+jys0ausT83wYk98e8he:nc4VVzxNf3qV0/yNausTb8e8he

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

life

C2

185.161.248.73:4164

Attributes
  • auth_value

    8685d11953530b68ad5ec703809d9f91

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000400000001da5e-2334.dat.bin
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections