General

  • Target

    0x000700000001271d-83.dat

  • Size

    172KB

  • MD5

    1e00cf57d83b47756bcbdb8e50daf4c2

  • SHA1

    f24843a07d70d6324858ac6bf500d80e1462cadd

  • SHA256

    54375f73c1bdc35ee69c07db3f8594fa77a03193d44d868e18da491c5209e4ea

  • SHA512

    6b8011c59d52617e1118f67edfb74fa596fd7bc0ee6d001e4c82add4473ebb0063c848ccae46cbb47acad1f7e6bcd260598133d595e580b00e0706b6a845f64b

  • SSDEEP

    1536:6cyplTW36sv0W7TqrJmrHC+o1DWxFRIQrPvu+xNjkYQH3buI61dB7Z20GkRU8e8U:CpxgOIYSxVrPvu+xNnCU1D7Z2X8e8hi

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lupa

C2

83.97.73.126:19046

Attributes
  • auth_value

    6a764aa41830c77712442516d143bc9c

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000700000001271d-83.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections