Overview

overview

10

Static

static

10

router247.exe

windows7-x64

10

router247.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    router247.dat

  • Size

    145KB

  • MD5

    d11fbae039bcb326433ba6a01468d027

  • SHA1

    bb2b1e0145a3e2b87b455f30287492eed05f8e8c

  • SHA256

    181aab0ffb463dd4f8c595a5b2fe53328d4b5d53c2d409464fac837da294b4b1

  • SHA512

    723a2c5699eeca57e8ed5e5b4e5d77f74ff28479dddabdc4868a30748c0bf48f61309f4fbd606a9c4a9fff34eaac7cab41ae923b75400b76df46f93ee3e0b9da

  • SSDEEP

    3072:oV+m5czQmRS9Ynk5QXNhhRbG5h5Zx8e8h/:ojKtM5h5b

Score
10/10
luzaredline

Malware Config

Extracted

Family

redline

Botnet

luza

C2

185.161.248.37:4138

Attributes
  • auth_value

    1261701914d508e02e8b4f25d38bc7f9

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • router247.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections