General

  • Target

    0x000900000001daf4-145.dat

  • Size

    168KB

  • MD5

    c79c9b743522f10ffe780bd996ad5124

  • SHA1

    f7b88b6f3a7e987fc075faee9d4f11453439567b

  • SHA256

    db79504ab3f0cd3811891d25c3b20f6e3d7d7425e7e3be2cb0de7d1e072231cb

  • SHA512

    3c1a01cdf016bdbf9ea5d9e4f3c97759bd0f48f6bc72b16e350e44871fcf557e4d10562cd4d2347f7a7eb34c3713bd73758ca70c198165c2736c5f2e6c1333d6

  • SSDEEP

    3072:iKAauIg8WXywg4y1LqVcwUN2rRK0J8e8hx:iKAfrszeRK0J

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

divan

C2

217.196.96.102:4132

Attributes
  • auth_value

    b414986bebd7f5a3ec9aee0341b8e769

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000900000001daf4-145.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections