General

  • Target

    0x000700000001270f-116.dat

  • Size

    145KB

  • MD5

    4018845746470c93ca4675fc774a00e4

  • SHA1

    0d944aba6a6e178a86b4d352651e56115a164ce6

  • SHA256

    bed42162bde89ddcb35190082b4952168220179a1c5567ad4b8720d0e0f88526

  • SHA512

    5b423c6c686411b1cbd8447e9dc6287c86975c7190778610dc547e4a7d90bb497be35ff430aa88e16a7d2220221e860952e4986e69453d7de320b83d020575d4

  • SSDEEP

    1536:o2BGlTP+mZP61sEYDmRSNIgcscLDuRwH77+u8oxQKHbuxGBNM740wuei/Qv+R+Fn:6V+m5cvQmRSN90+82iTi74h9ZF8e8hU

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mixa

C2

185.161.248.37:4138

Attributes
  • auth_value

    9d14534b25ac495ab25b59800acf3bb2

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000700000001270f-116.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections