General

  • Target

    0x00080000000122e8-117.dat

  • Size

    145KB

  • MD5

    acca907f1634513c5c44db4ae271327c

  • SHA1

    340b1e7b59d190bf9103bd82f229690fa2c19264

  • SHA256

    a7bdc8e47f89f87b8273867b5986815096c02eea808695dd7e5c6b511c1ff905

  • SHA512

    975e1350d56ba8ee3b4f4db5608373c96dca36ca91f224d3e62aead0fb2f936bd5969e734180900de74401519fb8695816bcdf120c7f1f9b4154432db276d5f1

  • SSDEEP

    1536:IWBGlTP+mZP61iEYDmRSxPg4sZ1kQiQo2/yu4PDhoZQiObup3KjDOt0wuei/iv+x:6V+m5cNQmRSxR10OzbnOthzZB8e8ht

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

meren

C2

77.91.68.253:19065

Attributes
  • auth_value

    a26557b435e44b55fdd4708fbba97d21

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00080000000122e8-117.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections