Overview

overview

10

Static

static

10

localization.exe

windows7-x64

10

localization.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    localization.dat

  • Size

    145KB

  • MD5

    b4d105db92a8727df2a83ceab19ecb90

  • SHA1

    bf9b40a31a16e0c42d45220363abf1fe1c964163

  • SHA256

    435be9c164773fe921a319c05058ec2d6b886b756b200697eb99a3b885f7cdfd

  • SHA512

    2c8fc741a792ee9636db7a3b623f5406089d66479b1f5d9e68799aa0337ab8d732093918ad46217dd361411a0a406684181e4b201930d4e964cf2428c29c57f3

  • SSDEEP

    3072:FV+m5chQmRSZkJaj+5oxvtXwkXh0Za8e8hM:FjE1GnRXh0Q

Score
10/10
derenredline

Malware Config

Extracted

Family

redline

Botnet

deren

C2

77.91.68.253:19065

Attributes
  • auth_value

    04a169f1fb198bfbeca74d0e06ea2d54

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • localization.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections