General

  • Target

    0x0003000000000741-190.dat

  • Size

    145KB

  • MD5

    808a1074de8e2d669778690fb3326718

  • SHA1

    35c31fa526ffeedf7b29765797154f2f285fdb30

  • SHA256

    8f6bee1cd707a1a220c5641052bbc575449adc50c001fa422ae11d6b704eaa87

  • SHA512

    bb2384c8b861dcceaf3349531df6cc47a8aed59380ce8e448edfb2fd6cac4557c3f468c5a115819ba6fe690bd3f551b725d727ed9423bab3ad2cab4b76c4f5d1

  • SSDEEP

    3072:2V+m5cvQmRSNeeR0TCnw6kHhjZd8e8hq:2jGRDHhjn

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

dopon

C2

185.161.248.75:4132

Attributes
  • auth_value

    8b75ad7ee23fb4d414b2c7174486600e

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0003000000000741-190.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections