General

  • Target

    0x00080000000122fb-116.dat

  • Size

    145KB

  • MD5

    ea02143ac313798985c5ed52585b428a

  • SHA1

    b2e95f07ae7ea20cf7fcb98bb8925d1ffe53298d

  • SHA256

    357236ee9d0eea188d9e4ae1b30211fd69b51ada5ffed7dc621090f22b89b553

  • SHA512

    5fc8c57a28676c958c865a87a54faca60b319826e0f107c585ca2864d3aba97f3bef4f191ca233d0b78dac2ac3eadcc255793f6a5b25d54ea348462b9644f54b

  • SSDEEP

    1536:E2BGlTP+mZP61WEYDmRSZDgQsaZJE+vZCimCemhoiQoxbudfIXAIG0wuei/g4v+2:OV+m5cRQmRSZPabJzOFQIGh+ZJ8e8hq

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lusor

C2

185.161.248.25:4132

Attributes
  • auth_value

    3dbba3970a1ecc1d78ed03874f611a75

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00080000000122fb-116.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections