General

  • Target

    0x000700000001da7a-202.dat

  • Size

    168KB

  • MD5

    ca73204d35ad557f1314ca52822d2f4a

  • SHA1

    430a3f71f30c29441f80423ad5e8b2f11418ed9e

  • SHA256

    8aca12eb9ff6d5b8f890d30f1f9d35895fe53c1baa447794700f6f9ec72fa8fe

  • SHA512

    c1e5b814241acf395fe0bd248b40ca69f08fb4811999ddfee9aefffec8e3207f3c69378659ce682404e9e20429e80e67ca9c9e789cdf1a5a54fa567468484e27

  • SSDEEP

    3072:4oYLhFyaAPY7IVTGqV8se2QnVyKX8e8hM:5kQi7SGY4nVyKX

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lakio

C2

217.196.96.56:4138

Attributes
  • auth_value

    5a2372e90cce274157a245c74afe9d6e

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000700000001da7a-202.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections