Overview

overview

10

Static

static

10

0x00080000...78.exe

windows7-x64

10

0x00080000...78.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0x00080000000134bf-78.dat

  • Size

    145KB

  • MD5

    db01276128647e96287dd5398be8d1d2

  • SHA1

    9a740cfd50c22add75570015622a169e0d30a72f

  • SHA256

    c3052d1c9c11374b6a3a86259433677907a002ac728fb8a05dd78ad06e971eb4

  • SHA512

    93e9ea7ae9ee7602691901b0f6167a3212d7795fe1a5a9d1167a6849f84f6a0bec0e0901f0bcde68a0e734f1e2ee12e10114cd394668a7cda4aa08f8e0cc4222

  • SSDEEP

    3072:RV+m5cVQmRSxDBxX1Ni15XPC3nKh7Zp8e8hZ:Rj4mk1wnKh7T

Score
10/10
demisredline

Malware Config

Extracted

Family

redline

Botnet

demis

C2

185.161.248.25:4132

Attributes
  • auth_value

    8a9a54cb72dc3d7ab6792d3a28b3d1e1

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00080000000134bf-78.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections