General

  • Target

    0x0007000000012740-117.dat

  • Size

    145KB

  • MD5

    55970ffe455f253ddd821fc8da7f9c07

  • SHA1

    7d54a71ffa528050d16be3139b66844b9e830a2f

  • SHA256

    5b669f3c4ff9fd6b93a9b2ef2109a30f0d9d3c58046d9cd8fc34eded325f3fc2

  • SHA512

    36568e3ae1256f7b12d10eff1f529b0bd779376eb53a83448496d14b6dcb24c772568e3322253464392073b0a63286cc8e7ae33e74b7055588c2b1d1df6b44d5

  • SSDEEP

    3072:yV+m5cZQmRSJyq2G7z+Ued26U+QEThhZ98e8h4:yjcWnC1PCEThhH

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

luka

C2

185.161.248.75:4132

Attributes
  • auth_value

    44560bcd37d6bf076da309730fdb519a

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0007000000012740-117.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections