Overview

overview

10

Static

static

10

0x00080000...78.exe

windows7-x64

10

0x00080000...78.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0x0008000000012722-78.dat

  • Size

    145KB

  • MD5

    b9a9c32d8261fd69550c7ebb97f133ff

  • SHA1

    3f6cdc457a535576d6843ebbed900073503bae1e

  • SHA256

    18d0c5e239e99b06fc588ba591553e50d956b1770aba233c893081e806e9bc91

  • SHA512

    30c7920b32898b8c3c41500e45ee8b37e388f4d9a75b682b9c7705301ba06cb3653f3d76344cd8781180bd04ec8ef44773261896828a58f0d328e202c2d0ddd4

  • SSDEEP

    3072:iV+m5cDQmRSgEmlg9Sb8vqlRpwGpjhqZ18e8ha:ij6PwvayOjhq/

Score
10/10
dizerredline

Malware Config

Extracted

Family

redline

Botnet

dizer

C2

77.91.68.253:41783

Attributes
  • auth_value

    0e234bb14901524913ef6643f8b8385c

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0008000000012722-78.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections