General

  • Target

    0x00070000000134d4-133.dat

  • Size

    168KB

  • MD5

    cf0a482fcfe7fcf38ce1d9b5a0494915

  • SHA1

    af6f9508e1298901c55558d09e2fb1ed279b08df

  • SHA256

    632233c56fb0596db161f921088713fe260c0d5ca001643aec8d3265798785b8

  • SHA512

    65039673a9514102b2d0a68a2f62f588598dcb360d87e7170b35258fccc06d788444e3af2886586519a635ef0ac7de2a6b369e9014be9a65767a8d9195ff666e

  • SSDEEP

    3072:4oYLhFyaAPY7IVTGqV8se2QnVyKX8e8hM:5kQi7SGY4nVyKX

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lakio

C2

217.196.96.56:4138

Attributes
  • auth_value

    5a2372e90cce274157a245c74afe9d6e

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00070000000134d4-133.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections