General

  • Target

    05019299.dat

  • Size

    145KB

  • MD5

    1d95125fb35b71572a869cbbc0712272

  • SHA1

    f65398a28f7e26338a24dba54d696b65c4659c83

  • SHA256

    c17157a0860b821517fafecbb85fb89769050c7624d5d8cd7a0ce1e860f84a9e

  • SHA512

    a0c0fa687934509b1b635847c1207605f459e95f9a6173e3a83fa0546260c6e39cec9aa19e28d5f1163d362319fd82e6af46cac220c080b333aa3d1f142abd62

  • SSDEEP

    3072:iV+m5c/QmRSNxx1dFU3vPG3Jh7ZN8e8hR:ij2Sf9Jh7X

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lupa

C2

83.97.73.122:19062

Attributes
  • auth_value

    6a764aa41830c77712442516d143bc9c

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 05019299.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections