General

  • Target

    0x000b0000000122fd-64.dat

  • Size

    254KB

  • MD5

    f0ea5f95775ebf4f1dd466643cd1ada0

  • SHA1

    bca03393f7949ad007d4131b2abdc877ae3706e3

  • SHA256

    28c76e66d29a449750c2331ed783af24a77f09cfbe392153a72e752ff5f4b3f8

  • SHA512

    4a9df69c98e83f47263482ebce3e8b9df9b2a9bb70cf13728fbaace45b302902db443e40ba9be2e9dd69ad5c3576e2fc0e52e23ed91023b57bbeff56f0f2f4f9

  • SSDEEP

    1536:yaelQzahvRx7VnK907k6zQ6c9mNl+KCDbVqr0mRqYEP0sHery0akMJrr:Xelz9pKek0q9c0rvU/RqYEP0sCKkArr

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

new1

C2

hfiepqnsyosb.top:81

fhgerbugjreqnhfegrb.top:81

Attributes
  • auth_value

    3a3079db884153e24cc7bde3453aec7a

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000b0000000122fd-64.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections