Overview

overview

10

Static

static

10

0x00090000...78.exe

windows7-x64

10

0x00090000...78.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0x00090000000122fe78.dat

  • Size

    145KB

  • MD5

    3690f1266e6cbb66ee22a8c3ef93c181

  • SHA1

    c092149c715a0f62fa70eced3ac021248409ddef

  • SHA256

    fcdcc88213015674212ccb32dd312f35a48b77e32994322c33e9282510eef6ba

  • SHA512

    8e72804431d5427e7f67b96e97fd56daf692ed721e25f6004592807125cc3613b7db56c10230a429a821217b39764a41dec24d5f7641d7f02277609b2c4200ff

  • SSDEEP

    3072:RV+m5cVQmRSxDBxX1Ni15XPC3nKh7Zp8e8hZ:Rj4mk1wnKh7T

Score
10/10
demisredline

Malware Config

Extracted

Family

redline

Botnet

demis

C2

185.161.248.25:4132

Attributes
  • auth_value

    8a9a54cb72dc3d7ab6792d3a28b3d1e1

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00090000000122fe78.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections