General

  • Target

    0x0006000000015600-117.dat

  • Size

    145KB

  • MD5

    324a08f5422903239ff6ad43de0544eb

  • SHA1

    c984a8670fece5e3d13fb88049d8238bbf4f2b78

  • SHA256

    7c053a03b6a1ed12963aeca53408ffc1c05e79f5eb56d77b0c9f26a735f1fd01

  • SHA512

    19b2a35923d5cd483d97589fc57a2382da5f143e09a661cd6ab3b7254cc58a7ee10a3d5f5341e85960b29ebe081758e1b4704019de828030f474307e116dac89

  • SSDEEP

    1536:o2BGlTP+mZP61sEYDmRSNIgcscLDuRwH77+u8oxQKHbuxGBNM740wuei/Qv+R+Fn:6V+m5cvQmRSN90+82iTi74h9ZF8e8hU

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mixa

C2

185.161.248.37:4138

Attributes
  • auth_value

    9d14534b25ac495ab25b59800acf3bb2

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000015600-117.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections