General

  • Target

    0x000c0000000122e560.dat.bin

  • Size

    95KB

  • MD5

    cc910dddf325569e7d0635444b777bc4

  • SHA1

    17f4d945585d5ce827692959bf8e21acd233727f

  • SHA256

    0bf11393529cad9aca73ae2c0c0fe309eff376c6c8bbbdf9ed87ae8e9e39be55

  • SHA512

    cd38c6d774c546c3c7fbbbf349cc2f70d258032ed184a15aac6d7bf36d9e4677f4c4d671e0e0a88c96efdefdc9a87d61d04739b985d0ec1093db17bdfbb3f608

  • SSDEEP

    1536:xqskjlqzWlbG6jejoigIr43Ywzi0Zb78ivombfexv0ujXyyed2QteulgS6pk:fYUeYr+zi0ZbYe1g0ujyzdYk

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

jimmy

C2

51.77.78.49:41468

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000c0000000122e560.dat.bin
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections