General

  • Target

    0x0004000000000733-145.dat

  • Size

    168KB

  • MD5

    bc35f3ec55002e1949fac28cb5067e71

  • SHA1

    e80ac80cee59a3b2c1d60df9a2a402b1ea804ead

  • SHA256

    31adb9364e2636c3df33157cb7488cb89ed70b61627bfffe8b902fb0475a877f

  • SHA512

    c74cdccf36938c7b7832d6fe2bc0fe873edbfc82a9b114ee50b8f53c8107e1618c0ab7821ae4a22bea04f625f76db4f3f5b7afbd97e1c22cb5af11e6e266ca89

  • SSDEEP

    1536:bO5wJnqlVZRGWbD7irbYzNegMVBq0ZjTGqVQbuVP6yue/b83wYkz8e8hy:bO566sYOqAuqVgc63e/bt8e8hy

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

darm

C2

217.196.96.56:4138

Attributes
  • auth_value

    d88ac8ccc04ab9979b04b46313db1648

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0004000000000733-145.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections