General

  • Target

    0x00090000000122ea-78.dat

  • Size

    145KB

  • MD5

    0da5aab468b1c7ef0372b586af6fa4ff

  • SHA1

    eaafb3e83739d78fd7a4b978b12bfc765e37feee

  • SHA256

    40aefeb4a2e811f50bbdff99a9c92daf5fa6dae5bb9eeeec48b3eee52be9cd45

  • SHA512

    e64bd52d2807fb32333839ac288184e7abf4712bb87c4cb1ba8e798b0f143c3ad7412a4880e91f1d4448d9a118dbe555fdefe23ae6f934d9635a66c73d6ae6c0

  • SSDEEP

    3072:AV+m5cVQmRSxAX9GYM1vYWr9h/Z28e8hq:Aj4Zyz9h/M

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

dogma

C2

185.161.248.75:4132

Attributes
  • auth_value

    d6c5d36e9aa03c956dc76aa0fcbe3639

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00090000000122ea-78.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections