Overview

overview

10

Static

static

10

0x00190000...16.exe

windows7-x64

10

0x00190000...16.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x00190000000124a1-116.dat

  • Size

    145KB

  • MD5

    2b9d6006e0f0b1f1e180b42292cc95d6

  • SHA1

    893bf2f552c9d63b8eb348cb42fd94b938c9c837

  • SHA256

    b894d9f150a3c5af97e038a429cb9afb1fc0e090c8f9a3d2ce6890d9ad64160f

  • SHA512

    64ef835f5881df7bde09f65ff7c6747425bdf22bf32dd93a2a1293861efa10d41d7acfda166fd901a69012775bc00519b12b542a6404842e623cdc1e86f0dc4b

  • SSDEEP

    3072:sV+m5chQmRSZQhKb06+T9/vhmZl8e8h+:sjEkb0zvhmP

Score
10/10
muxaredline

Malware Config

Extracted

Family

redline

Botnet

muxa

C2

77.91.68.157:19065

Attributes
  • auth_value

    2aa20db2a108f11cdb3b9e2729b02d99

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00190000000124a1-116.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections