Overview

overview

10

Static

static

10

0x00080000...78.exe

windows7-x64

10

0x00080000...78.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0x00080000000132e4-78.dat

  • Size

    145KB

  • MD5

    da776540eedd472a5e6aaf473421b262

  • SHA1

    bbcb903ce1024b1048d8a6e0c6a75f10b0ce79cd

  • SHA256

    c2b339e784d32e94fe67bcc28c3fcdec7e09c6dc0135a1f4573e2de8dd241860

  • SHA512

    ea39cba1d043c4da52c3adc4956038e4fab5766aa0bfdeed25501f11893258b3ef3486ad3a8a29e22f425552ee9f289f5914330d0d61cb17523c005aaf11a805

  • SSDEEP

    3072:UV+m5crQmRSR38jQ50LiZzq6/hCZx8e8hG:UjCZVLq/hCr

Score
10/10
duraredline

Malware Config

Extracted

Family

redline

Botnet

dura

C2

83.97.73.127:19062

Attributes
  • auth_value

    44b7d6fb9572dea0d64d018139c3d208

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00080000000132e4-78.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections