Overview

overview

10

Static

static

10

bitcoin805.dat.exe

windows7-x64

10

bitcoin805.dat.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bitcoin805.dat.exe

  • Size

    145KB

  • MD5

    b1195c8c5562953aac3594d566e81b88

  • SHA1

    dd1b17c996d793c806e982a4fcd5b719362c76e8

  • SHA256

    ef03decb216adab67dde993d93db7f6e4848ded2035e44f1ecc04a2274fbeecb

  • SHA512

    f867486ca8b6d7d6dedbda1a1db927b97fba83426a1b73c0a5f51b079d0328f4155cbb3c83adecde8011d902eeb594fa4169bee5fb381aed4d8acd0d3bedfaf5

  • SSDEEP

    3072:2V+m5cNQmRSxWWAcP+DDXedh7Z58e8hk:2jwCUudh7z

Score
10/10
duperredline

Malware Config

Extracted

Family

redline

Botnet

duper

C2

77.91.68.253:19065

Attributes
  • auth_value

    57e17ebbdb18f4882b95fe05402ef1c8

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bitcoin805.dat.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections