General

  • Target

    0x0007000000013a0a-120.dat

  • Size

    145KB

  • MD5

    df571bfc4b733a2dbb4d94231bdcea7c

  • SHA1

    0aef9f3b8d69dff62e401e2324b3dfbbcfdde9f7

  • SHA256

    1433a6eead658686d71a5d967a68dd4f27ec55cb026526f6c61bca67d96920d3

  • SHA512

    7205a86419c80e83d7a79fca08d4e727d7268d1169c0a6320b5ab960e0cd7ebb7de3801e23a576174580336642a3dbb38bc69058712a2a940fca3bf469a66fbb

  • SSDEEP

    3072:2V+m5cNQmRSxWWAcP+DDXedh7Z58e8hk:2jwCUudh7z

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

duper

C2

77.91.68.253:19065

Attributes
  • auth_value

    57e17ebbdb18f4882b95fe05402ef1c8

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0007000000013a0a-120.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections