General

  • Target

    0x000900000001230b-78.dat

  • Size

    145KB

  • MD5

    d10c3a2571cbe3bde263ceb6f52621db

  • SHA1

    baa5b3bc5fa7a476c1063d816850b984ffbbaa6d

  • SHA256

    4ec02139ca8d306b3bd6e71f5b54035b293dd6002c2f7729afafe32125a44b93

  • SHA512

    797aad0e6b6cb8c0b5a6c504900322c927352de87ca4ce98757a4a378b61c60a606d26b812e17b0cf6cf6a3e2051f9c23fa4c8197ebfb65bd13c45deda24a122

  • SSDEEP

    3072:vV+m5cVQmRSx9WCEkEhPW67V8BjVhtZN8e8ht:vj4oihwlVht3

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

diza

C2

185.161.248.37:4138

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000900000001230b-78.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections