General

  • Target

    0x00090000000212ab-183.dat

  • Size

    168KB

  • MD5

    84e24506ed0135659dabb67a2f887294

  • SHA1

    49189d898efbac1e88876c6b3ecef1d90ee9df94

  • SHA256

    d95e38bb861f5c315b7f2494afbe9b2b782e8ab0f673e8ebbd07314f8f996924

  • SHA512

    0b0358e67194e91b545dadaf01f275002dd2cdd6a5bc95138fe3be2338a73fe95d231f8047e88bf8359293354cc4d819625eea4cdd9b5f635f25ef4e92c77bfc

  • SSDEEP

    1536:2N+pfrkqlVZRGWPbrrVqmxPZbrsU0WSGGGGGGGGGGGGGGGGGtECK8TGqVGbunTeK:2N+pT99xRUxFqVSTYkNpD8e8hl

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

maxud

C2

217.196.96.101:4132

Attributes
  • auth_value

    f1403d964c52b6641ba1ef14803e6e74

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00090000000212ab-183.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections