Overview

overview

10

Static

static

10

interface742.dat.exe

windows7-x64

10

interface742.dat.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    interface742.dat.exe

  • Size

    145KB

  • MD5

    59e0fa4921ac51744f9c7ef752d370b8

  • SHA1

    30b0375c1c3c1bc7b6d403f773b1ba3eff3371a0

  • SHA256

    ae595eb98cc6b81374cf4f66ac6e27be1f22f90b146c72b201e26d4ae84f6b16

  • SHA512

    92053efe39d7bea1dab1c97f0cce0dc464c15d35ffe68e9756c7d34568433d9bd8b89652a74e079d8057c1c90e887c43ca155d83b52869b3de719f31184a27d5

  • SSDEEP

    3072:oV+m5czQmRS9Ynk5QXNhhRbG5h5Zx8e8h/:ojKtM5h5b

Score
10/10
luzaredline

Malware Config

Extracted

Family

redline

Botnet

luza

C2

185.161.248.37:4138

Attributes
  • auth_value

    1261701914d508e02e8b4f25d38bc7f9

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • interface742.dat.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections