Overview

overview

10

Static

static

10

0x00060000...94.exe

windows7-x64

10

0x00060000...94.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0x0006000000014ee5-94.dat

  • Size

    145KB

  • MD5

    5418e8aba530656c378f152b795231a3

  • SHA1

    6c4f52d80599793942015144fbf26ff15940e600

  • SHA256

    06738acb06fd379eeb3dea58054f51c973bcd136da8e8bc9ad14ad3c43da47d9

  • SHA512

    dfae4deb13824b748103b01eb70c4647d3d0662ad358973d7d2b7cbfc2e8d4fdd0655b47653d8db88e04f21e079457afe436dc88b54e92b49affcb3451b5fc23

  • SSDEEP

    1536:FWBGlTP+mZP618EYDmRSNBg8sX72ZPGffuLEHKo8QJubueGJpfVT0wuei/qv+R+h:zV+m5c/QmRSNhGOy54SdVThDZt8e8hU

Score
10/10
dusaredline

Malware Config

Extracted

Family

redline

Botnet

dusa

C2

83.97.73.127:19062

Attributes
  • auth_value

    ee896466545fedf9de5406175fb82de5

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000014ee5-94.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections