General

  • Target

    0x0006000000023156-229.dat

  • Size

    168KB

  • MD5

    59e09379351ceec41bce5db46098a420

  • SHA1

    771357c0fe8863a71ddf300cc48e42f317f8ada2

  • SHA256

    74fe5f74049c580f13680707053e090e0652ba8edb971280510381b0992a6840

  • SHA512

    ab43ad2959f1736b6380dd453d0498856e1c328df9f92f3b1d5d807d5b2896580becb6d8a7f90ef9c66659a583117c0742036e3c5236f8666ec8a32139cabf84

  • SSDEEP

    3072:rC3YAOj8Wc2CC8cO7qV2k2obrgOdZ8e8hr:8YAh2CLdVOrgOdZ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mauga

C2

217.196.96.102:4132

Attributes
  • auth_value

    36f5411cf117f54076fbbb9ea0631fee

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000023156-229.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections