Overview

overview

10

Static

static

10

06316899.exe

windows7-x64

10

06316899.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06316899.dat

  • Size

    167KB

  • MD5

    b9af3e044e864972d8e944e8a28ebd02

  • SHA1

    c4b509bea40c27d736e4f488be7ee03a75d6e077

  • SHA256

    90bf5707ff5714b862e774f444940508c089f048ee6bf19d2ae946012a845348

  • SHA512

    0ae899a64a0edd5f1c559aa25b40836b0cd03d48dd79d73b441933d58fe6c86a667b7bac911dc177371bb6fc724ac8812882e3cf28e643158ff333584818e978

  • SSDEEP

    3072:irGkzIa8WuPMxNo/i6qVOg+uA+Eie8e8hF:iikzZEPtb+Eie

Score
10/10
maxiredline

Malware Config

Extracted

Family

redline

Botnet

maxi

C2

83.97.73.127:19045

Attributes
  • auth_value

    6a3f22e5f4209b056a3fd330dc71956a

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 06316899.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections