Overview

overview

10

Static

static

10

0x00060000...28.exe

windows7-x64

10

0x00060000...28.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0x0006000000023134-2328.dat

  • Size

    169KB

  • MD5

    efc2ae71216ad6817a80dddaacc8bd5b

  • SHA1

    0b51f46eb3e0ec09c2d6fd9de7814696382e0c30

  • SHA256

    8022429edda6647e699e1b883a0249b1605f59476f4da51504af1d291c24509d

  • SHA512

    30e74d773fc48e0e881a48d4f03106eb12da0ae23988683e2174a092e5a0a82601772ce81a19054bebefc893829338f258e5736ebdb38f14b53adde494347664

  • SSDEEP

    1536:6SC0Ji8gqlVZRGWGl4FrGZ/StgThBzyWToTGqVUbuU3YzCjj+1983wYki8e8h1:6U90lLZV3LtqVsvECjj+19c8e8h1

Score
10/10
dorkredline

Malware Config

Extracted

Family

redline

Botnet

dork

C2

185.161.248.73:4164

Attributes
  • auth_value

    e81be7d6cfb453cc812e1b4890eeadad

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000023134-2328.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections