General

  • Target

    24468540.dat.exe

  • Size

    145KB

  • MD5

    546eccf2c66b1e1be0123b5e971d2abd

  • SHA1

    f0cb08496cb66eecdd638fb06bb938a5c4d81711

  • SHA256

    d12ea137769496ede3e617a4939a2f34a879c09ea25a3ea79cb0772a7e588738

  • SHA512

    16df1610933a8bc2afaba2a4c87f3bd575e62614f8276cd25feb6790f9f8b5c6043f39ebc3c2954cc515cfdcd67fafcd7b1253c5ac871d657e768a8d771992f0

  • SSDEEP

    3072:oV+m5czQmRS9Ynk5QXNhhRbG5h5Zx8e8h/:ojKtM5h5b

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

luza

C2

185.161.248.37:4138

Attributes
  • auth_value

    1261701914d508e02e8b4f25d38bc7f9

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 24468540.dat.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections