General

  • Target

    24468.dat.exe

  • Size

    145KB

  • MD5

    60499f6b68ddef50da6a841bb0292268

  • SHA1

    2c7eb2a8b2fb0d81c4ab41ce4e638a4a4c89adf1

  • SHA256

    7eaee2978498ed1039b76660802d8646205901e8662c4ab5356c22cb082ef3f1

  • SHA512

    0af40f890aac402b91fa4c8f707ab1e44a802ee40d8d9dfa8e55d81c72b67e7305a93819634652ac03d5bb0d6d297ce61642b1b5848fa1ae3ca81c2b2073820c

  • SSDEEP

    3072:xV+m5cDQmRSgE+DxK///////////////////////z//////////////////////X:xj6LRkIoyh+H

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

luzer

C2

77.91.68.253:19065

Attributes
  • auth_value

    52ac0c448e1447c66438e5ca2f66e04a

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 24468.dat.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections