General

  • Target

    0x000900000001232c-78.dat

  • Size

    145KB

  • MD5

    538e0a00010fdd447cf8516ca5594e64

  • SHA1

    d8aa840e45ea1b892d4464fa6a34c4d62bcedb56

  • SHA256

    9f919d1ccd417917db54abc6b09aa9ff821b8f81528752759b24570551ea3b40

  • SHA512

    5d62d99128702c4f4a1c6d55772d0a57a5ae25ddcfe83b7c49a5c0f1964ed7ef697b81915ce15d80a69c77f9ed8396b3e74cab4cff2d1f74dfc8fbce7d3fdf06

  • SSDEEP

    3072:AV+m5cVQmRSxAX9GYM1vYWr9h/Z28e8hq:Aj4Zyz9h/M

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

dogma

C2

185.161.248.75:4132

Attributes
  • auth_value

    d6c5d36e9aa03c956dc76aa0fcbe3639

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000900000001232c-78.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections