General

  • Target

    0x000300000000073b-174.dat

  • Size

    172KB

  • MD5

    a3af5188a98e3700ff3a61479f7a2247

  • SHA1

    a13adc789cce17ee4f63508083aab685221e019d

  • SHA256

    5501ecd55d8114bf1fb0364c8eed6e3834a367900a532581dc4a78eb4eb50f10

  • SHA512

    3b8464a02186b2bcc2ad343dc9a844f3a0e89faa3507b9848b4aa62f8e3fb295a3c07281f0ba101eae7d7d3d3e623c3370813b5994032ef2241dbe23635cce33

  • SSDEEP

    1536:gtaPgzl736sv0W7Tp8JFrH4ySLn1nbAxNTIYQ/dbumgzeFra6l0GkR88e8hZ:g6gJBO0y6RbAxNjgOqFra6l/8e8hZ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

diza

C2

83.97.73.129:19068

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000300000000073b-174.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections