General

  • Target

    0x000600000002316a-191.dat

  • Size

    145KB

  • MD5

    46e28d7c03230c64bdd898eba1686b8c

  • SHA1

    d460dad5fe9f26655098fd409f9603d4f5ef5417

  • SHA256

    d324eab736407bd79054368e6f3153e967e8f82263b89ea988fc311e37697fb2

  • SHA512

    02fa63ae42f84108b6a0ddd7f5bd75b32fe8c3a0d38dfd2ed38b74f1c9e1d809b1af8194f380206689159fc195f1cb9314b90c4098f94ad3245c9589abc52796

  • SSDEEP

    1536:o2BGlTP+mZP61sEYDmRSNIgcscLDuRwH77+u8oxQKHbuxGBNM740wuei/Qv+R+Fn:6V+m5cvQmRSN90+82iTi74h9ZF8e8hU

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mixa

C2

185.161.248.37:4138

Attributes
  • auth_value

    9d14534b25ac495ab25b59800acf3bb2

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000600000002316a-191.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections