General

  • Target

    0x000600000001420f-116.dat

  • Size

    145KB

  • MD5

    1fefec59fe6cfa6c7006da61a92a7b47

  • SHA1

    361fea41fed0797c7a659566802fd5701caadd37

  • SHA256

    d8bed40ec4556eac0e3923e9754c30ba2b84ba9588babe82191321d336f85374

  • SHA512

    d5722af02b8965e325dc6f347af84309892240e6d1fe1e4ab8b96abe72ef10c4d7b4f452a9d1fca40961c21cf634cf51910d54efbd60febf5b6d258f4cd96957

  • SSDEEP

    3072:5V+m5cVQmRSxIEN1MjdVti90hSZ18e8h4:5j49k90hSP

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

larry

C2

185.161.248.75:4132

Attributes
  • auth_value

    9039557bb7a08f5f2f60e2b71e1dee0e

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000600000001420f-116.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections