General

  • Target

    0x00090000000122fc-78.dat

  • Size

    146KB

  • MD5

    d52841b6d1386577a98d1a521cdf99d0

  • SHA1

    f2172aab5a368cb120838b2b7bac5e486ecfcb6f

  • SHA256

    b55f667e95f2a65d72b2b314f493c17b193ce2c6dc48238460dd99ba967764a6

  • SHA512

    58f03195df2d3edfecb491bc9bdaae817dff5f0433e0e0944676a333bc9f99f644326f16c8228a07f5410e927fd3a8e8a2fb08f7283806d33086c5deb861bf6a

  • SSDEEP

    3072:vV+m5cVQmRSx9WCEkEhPW67V8BjVhtZN8e8ht:vj4oihwlVht3

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

diza

C2

185.161.248.37:4138

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00090000000122fc-78.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections