General

  • Target

    0x00080000000122e1-117.dat

  • Size

    145KB

  • MD5

    ff72cc4c22fcac56ce2f9b0fbd50d863

  • SHA1

    e7b04cfeb3198b2d20e080029d1bd8ae70131061

  • SHA256

    f908072e454fa6c7cc255369f7177f7a0dc897ee2f9800529c78a6cc0e9f9a6f

  • SHA512

    df9c76144ed575ffef8efbb0dae1db22afe6d9d7a1d56c9896a74947f91d2af1c9263f8bfbdf96bc7e245cc749f9dd73cf88bb406f9c1a3e2a8842f2caab4bc7

  • SSDEEP

    3072:5V+m5cVQmRSxIEN1MjdVti90hSZ18e8h4:5j49k90hSP

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

larry

C2

185.161.248.75:4132

Attributes
  • auth_value

    9039557bb7a08f5f2f60e2b71e1dee0e

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00080000000122e1-117.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections