General

  • Target

    0x00070000000139ed146.dat

  • Size

    168KB

  • MD5

    d630d186abc429aa68a195912b17ad38

  • SHA1

    afd69390d9f0388bb2e95e92a2d620dc4f6f1511

  • SHA256

    53babad52816151550a421f8332f940901d61f90b58a182063a1deac6098798c

  • SHA512

    bb30abe478647b3060b87f2ea771faeed6af6058127739d98656c1bd1537174cb2f1daaa684ce9fe3d5c07aef0998afbc607bb04870f272392fa08ab62f5158c

  • SSDEEP

    3072:uJaohQaSe5clFcb0iCKbqVsTQZxTcVL8e8h2:uJteaSe5clhiVwxTcVL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mazda

C2

217.196.96.56:4138

Attributes
  • auth_value

    3d2870537d84a4c6d7aeecd002871c51

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00070000000139ed146.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections