General

  • Target

    app779.dat.exe

  • Size

    145KB

  • MD5

    9724bab716f7c63b899607bb969072f6

  • SHA1

    936fdee5054a354804eab1166070ddac9b5a7880

  • SHA256

    dae25b258d745afda334efce49a04cb6923964d149f5a866401be34ace5450aa

  • SHA512

    d8ebc9d01d54efda4d561c69e734400d476c2467a0c383c12df0f13bf38a660dc36f3099e9b7ea930e7d4ee7810427e758acb72bf06b55de7df2adf6fbcac360

  • SSDEEP

    3072:oV+m5cRQmRSZrrFPFq8ajsiiOhEZF8e8hQ:ojUg8fKOhEP

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

maxa

C2

77.91.124.251:19065

Attributes
  • auth_value

    3c06ec6b3eea9db7536a57bcc13f5bef

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • app779.dat.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections