Overview

overview

10

Static

static

10

04156299.exe

windows7-x64

10

04156299.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    04156299.dat

  • Size

    145KB

  • MD5

    7899cf774a4347b04e386cfb43ba02f7

  • SHA1

    411cb8d9c4b82799bd0e769a09d869ac25a01240

  • SHA256

    4d2ebc4f2e75275f77427de53157497c13a1df27b96e486cd87697eb53c692e8

  • SHA512

    895e6f328c02255853ae9f8ce244c31755cd7b12e2e82fd221e42f3c55b5cbdac4239250e1d931f14a777935e9b6d8ebdc9223ddd33d879bacb12bb27b4ee223

  • SSDEEP

    3072:UV+m5crQmRSR38jQ50LiZzq6/hCZx8e8hG:UjCZVLq/hCr

Score
10/10
duraredline

Malware Config

Extracted

Family

redline

Botnet

dura

C2

83.97.73.127:19062

Attributes
  • auth_value

    44b7d6fb9572dea0d64d018139c3d208

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 04156299.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections