General

  • Target

    0x0007000000012755-94.dat

  • Size

    145KB

  • MD5

    896fa3b08245ed9ff8322256ad0c7cbd

  • SHA1

    9813c362b0672a705b69cec86bacc0096194631b

  • SHA256

    46040eb844837afa79c46dac3091ce8a8881255d67393c3767347dd70f2c9301

  • SHA512

    fc371537ef9c32f94ade6996a02907e4fb4e2c33e92746e563abc3ef3476798a0bdcaf2b2e79f399f8608eb8ea006de27e1704daa6afb45b67ddab43821091c5

  • SSDEEP

    3072:yV+m5crQmRSR38/OxTH25OjNkphoZR8e8h5:yjCZMgekphoL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

disa

C2

83.97.73.122:19062

Attributes
  • auth_value

    93f8c4ca7000e3381dd4b6b86434de05

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0007000000012755-94.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections