General

  • Target

    0x00070000000139dd-94.dat

  • Size

    145KB

  • MD5

    3b791e80efdecf6d7e10b243fea74a87

  • SHA1

    fb625ccba8102673dd2cb14e0864f7651e031f8f

  • SHA256

    2f9a3fed22038ba83cb6e68305241f99f4f82a26f457a9c7c966ca8fa46efaf8

  • SHA512

    955eefda7f99ccfd76da416adb76c2c4dd65b6edb577a64d557f2a0a7430b74109341ada5cdefbef4ee172844af37236f24b5b589b01016fef36e457478fc859

  • SSDEEP

    3072:6V+m5cDQmRSgEZtDMucQTzIXNnpjKhUZp8e8hQ:6j6M7csYNnFKhUz

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

maxi

C2

83.97.73.122:19062

Attributes
  • auth_value

    6a3f22e5f4209b056a3fd330dc71956a

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00070000000139dd-94.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections