General

  • Target

    0x0008000000012302-115.dat

  • Size

    145KB

  • MD5

    80607664703628eeb0e11a7f0c77c0b3

  • SHA1

    8894c5b860aa6407666b282fa88af65427102ed1

  • SHA256

    20b282e131b8a35eeec717626ca1c5467b8b76f1196637afd4bc178ab165f810

  • SHA512

    90178e2bdf0d97da4810c8cb6e29117b2ad36384678a7a96b45829233da528768fa5c2f1f85d95e372f59c3b5832df939286bbe8b2b9f3a5dc5bf2e55d425397

  • SSDEEP

    1536:o2BGlTP+mZP61sEYDmRSNIgcscLDuRwH77+u8oxQKHbuxGBNM740wuei/Qv+R+Fn:6V+m5cvQmRSN90+82iTi74h9ZF8e8hU

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mixa

C2

185.161.248.37:4138

Attributes
  • auth_value

    9d14534b25ac495ab25b59800acf3bb2

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0008000000012302-115.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections