Overview

overview

10

Static

static

10

0x00080000...78.exe

windows7-x64

10

0x00080000...78.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0x0008000000013362-78.dat

  • Size

    145KB

  • MD5

    fc1b3f8b145d53bf0b45a644c8c4826b

  • SHA1

    1f15aba070bbaa7cc019ab7cd57f267e888780fb

  • SHA256

    931cc36b8594e90c6742c608f1f0143c44c77f8a885ea24c4e0cea7422d71ae1

  • SHA512

    43c987360a86d98eb017d68af111c9e9b4aff070e7ea39dbd7d992d39026a39d427b31bf04c98438928b2bb5b727817488b4879abd1a613c536cc9e87c0366f9

  • SSDEEP

    3072:AV+m5cVQmRSxAX9GYM1vYWr9h/Z28e8hq:Aj4Zyz9h/M

Score
10/10
dogmaredline

Malware Config

Extracted

Family

redline

Botnet

dogma

C2

185.161.248.75:4132

Attributes
  • auth_value

    d6c5d36e9aa03c956dc76aa0fcbe3639

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0008000000013362-78.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections