Overview

overview

10

Static

static

10

0x00080000...78.exe

windows7-x64

10

0x00080000...78.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0x0008000000012722-78.dat

  • Size

    145KB

  • MD5

    80c2bf095c3fc9377d3ea2c6734f9e0b

  • SHA1

    e142b34503e6eb5ece51cc83d7f699a2c10f91c3

  • SHA256

    3fe91d9aa871b48e051fc773e0fd8873f0d60016d1071b69443233596c33e844

  • SHA512

    e02df496f688294813365595f2a0c5afddc8c472d8b63c08933c922986a7eaba9398ad817461f88d6b6995eca7afdceb200edcd939bf40386a75ed51f04ee556

  • SSDEEP

    3072:2V+m5cNQmRSxWWAcP+DDXedh7Z58e8hk:2jwCUudh7z

Score
10/10
duperredline

Malware Config

Extracted

Family

redline

Botnet

duper

C2

77.91.68.253:19065

Attributes
  • auth_value

    57e17ebbdb18f4882b95fe05402ef1c8

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0008000000012722-78.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections