General

  • Target

    0x000700000001270f-106.dat

  • Size

    168KB

  • MD5

    d1e4b87053bd10017aa41462ade83635

  • SHA1

    30e3c1f02d20b494806982c35e81f032d8427c1d

  • SHA256

    ffceed3e99a4abed1f094b12a86e3dc97ebf20a4e68e50d23283886a5bc00225

  • SHA512

    8ed79c5f0628e1f9e6f24f0216acdfcd738f3432ab3ae57e459a6e783923a194f8bfb4f879704ec27c3ba312bbbc7b4cf76c7057a05d2dfc325c5edaa7b1645a

  • SSDEEP

    1536:SeiEBOqhVZCGWEWmPcn8WTVReVig+QrHGTGqVYJWbu0b3/DnRYKl84wYkp8e8hR:DiqFk8WTVpdQPqVYI5vDnRYKl88e8hR

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

dippo

C2

217.196.96.102:4132

Attributes
  • auth_value

    79490ff628fd6af3b29170c3c163874b

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000700000001270f-106.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections