General

  • Target

    0x0006000000023130-191.dat

  • Size

    145KB

  • MD5

    2c8c272c3ea39e13a245c5bfc2bca97f

  • SHA1

    6289a22c0a150a83ca019e9e1289a647343bd60d

  • SHA256

    dc7c664fc4787358045471e4f90c1490761165698b2167fc6abcca8c23bc32b3

  • SHA512

    c475c7557bf69099941790a45f0989f87a5cf5293536c8ab63a889784228cbf7b2b3a8afd8a8ab7fc363092725d1ce7ba183d543ebefc427bb0a3052c4351461

  • SSDEEP

    1536:o2BGlTP+mZP61sEYDmRSNIgcscLDuRwH77+u8oxQKHbuxGBNM740wuei/Qv+R+Fn:6V+m5cvQmRSN90+82iTi74h9ZF8e8hU

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mixa

C2

185.161.248.37:4138

Attributes
  • auth_value

    9d14534b25ac495ab25b59800acf3bb2

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000023130-191.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections