Overview

overview

10

Static

static

10

0x00080000...68.exe

windows7-x64

10

0x00080000...68.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x00080000000136c268.dat

  • Size

    168KB

  • MD5

    42c63ecc92fee8bea033b0e7ed785c77

  • SHA1

    1de59f1a4882252b6d8f53b02c48424d0e734d94

  • SHA256

    0569b8afb2cac7b990683bf6976e77aa66a3a32552b67739626c79ab65ea2f4a

  • SHA512

    b42c2bd266e7f3202fe8d465ef46f55339be8548bb9396863745671be1b68ad4a7cba850bb0504b112f71ed0420f146b2138a977995424ce7ddf57b1a5093073

  • SSDEEP

    1536:Eq24CeDYZ5QqlVZRGWoysHrt3la3cOo+TGqV0buhoxW7/C6gX83wYk/8e8hK:EObYH2HaXEqVMVxI/C6gXh8e8hK

Score
10/10
darisredline

Malware Config

Extracted

Family

redline

Botnet

daris

C2

217.196.96.56:4138

Attributes
  • auth_value

    3491f24ae0250969cd45ce4b3fe77549

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00080000000136c268.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections