General

  • Target

    0x0007000000012735-117.dat

  • Size

    145KB

  • MD5

    76d22f98a96ec0f505b726cce2afa9fa

  • SHA1

    2e59e737af43f02f496fe1f3c6f78090c555e2f6

  • SHA256

    b14bbf5f33707d4dc001a8c90e93a181941e8446caa9eced09e2f05cc233f520

  • SHA512

    647fd4141b6834f6cfeb04e9ed7c9a82556470f2fda60b2963008e0c846a5a592235662b47cba9e8ad7d31dd9a100aeb6f30d9c27538d3a597bb35602b32114a

  • SSDEEP

    3072:YV+m5crQmRSR38AQtQJ8uptt0phbZV8e8h1:YjCZE+phbf

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

luper

C2

77.91.68.253:19065

Attributes
  • auth_value

    474f8e2f629b7bc1a8c7ea1dc39ca043

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0007000000012735-117.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections