General

  • Target

    l3594779.exe

  • Size

    146KB

  • MD5

    d5e6af752db1481327e300693ad7c875

  • SHA1

    7762428ec980ee77a9ec5ad376461eb553cd8578

  • SHA256

    70ef77c340e5d7c3bed0010499de8f99694fe9a9ccb3481ecc1196f488d164c8

  • SHA512

    9430bb593a39083bb5259b6fff98f966e68c52712d2dc5285ac5fce9a2c7081f8c0b048c53ee4b181f429c3b997e07acad130ef99b6e4ec5a18512c1bd0d23e5

  • SSDEEP

    3072:cV+m5c/QmRSNwIO1mn30DwaFehPZl8e8hu:cj20kDTehPP

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

diza

C2

83.97.73.122:19062

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • l3594779.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections