General

  • Target

    0x0007000000014145246.dat

  • Size

    170KB

  • MD5

    a11e653a61026cdea9517e53378ce06f

  • SHA1

    7de66df8bd0cd91dc2802aad78ded139c4164951

  • SHA256

    216934868ec1697ba95b5cff5b792b8d270ad78eb88d493ab5a5d183860a9080

  • SHA512

    b67d48d4f468a406860f2b87409b8a2c20b8be3dbab2cf1792e2eb092a376846f2a02a661b08755d0a90a0e882d8f18f6bc33a5071cd3d5889823cf0dcc9b276

  • SSDEEP

    1536:TyqlwNqlVZRGWY8HrIGtRSotDaZIPeKNDETGqVqbuFz1CSwx83wYk/8e8hR:Th6D3GtzD263qVeUESwx58e8hR

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

diza

C2

217.196.96.56:4138

Attributes
  • auth_value

    bbab0d2f0ae4d4fdd6b17077d93b3e80

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0007000000014145246.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections