General

  • Target

    0x0006000000014140-117.dat

  • Size

    145KB

  • MD5

    c7e0987e5941611f69c826f06f32724a

  • SHA1

    777e73caf064c8b153870cf7020a4848b0e9e954

  • SHA256

    6e6caf2224a5c0b8fb6cac55798de98e492d4ab975eadcdb3321673fd84d609b

  • SHA512

    95a516dd5ca1c8bb84ec87c197d70f17208ee320ead7886c7e0e7b37db30b7f4a4b66d070d889d085cbaf016cbcaaea4c3be60ea1581b1910b1415e51c2a40ef

  • SSDEEP

    3072:UV+m5cZQmRSJ6FKJ9vsNR0ehrZl8e8h0:Ujcuhehrv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

maza

C2

185.161.248.25:4132

Attributes
  • auth_value

    474d54c1c2f5291290c53f8378acd684

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000014140-117.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections