General

  • Target

    0x0007000000014143-243.dat

  • Size

    170KB

  • MD5

    d99af88f1c3663943876bdde8083aa3d

  • SHA1

    6abe8142315e616d298c6c387fc245dd19c6d039

  • SHA256

    80ad223c1c2ed9f3fc4ece3a5c06c1a8546b64ce6a68ded3640eecc0c33f8619

  • SHA512

    873d260d2a9f7998a46f3b0f5d6d2e2e600d27689e0fae801948d92b4082ac75b9a3c793d8d572584b3acae31d1eef2987df8a2a6642742aa821a4d077d04ad2

  • SSDEEP

    1536:TyqlwNqlVZRGWY8HrIGtRSotDaZIPeKNDETGqVqbuFz1CSwx83wYk/8e8hR:Th6D3GtzD263qVeUESwx58e8hR

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

diza

C2

217.196.96.56:4138

Attributes
  • auth_value

    bbab0d2f0ae4d4fdd6b17077d93b3e80

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0007000000014143-243.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections