General

  • Target

    0x0009000000012313-78.dat

  • Size

    172KB

  • MD5

    daf3e7db4afa923028be9a6db8bbbc74

  • SHA1

    8cead347052df99013519b8a4a1909455add5d11

  • SHA256

    3779ef7b603037321de30174ee9e8cf7c31d938bdda8a9af1925f46b0082592b

  • SHA512

    c36597b116fd9a953b830f8018c2f46e9b3f767b3d126d0074f6a4aee7d5800c3428ac7a0be25c3d500722abcb39e60ea8050be5b6ec9fcae9e6108b98222859

  • SSDEEP

    1536:WEXFbl9T36sv0W7T6ZnCrHpd9YCOedT4uKbxNoUYQ5NbuQLOorhQ9Np0GkRf8e8f:zXFl9pcY9J1WXbxNC2KohQ9Npc8e8ht

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

diza

C2

83.97.73.126:19046

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0009000000012313-78.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections