General

  • Target

    0x00080000000122f3-83.dat

  • Size

    172KB

  • MD5

    26f2d07343b2af5007f20e75dfcd1ac9

  • SHA1

    98740307b48344a76b7e97f1f741382de247bbf9

  • SHA256

    c0df89e1efcc83ac75213c273a9d076b70d02d1f170697f6f4960c8459fcb302

  • SHA512

    ba78afc47e18dfcbeb6ea94865e13dd58a5e83a38347d261ad1437491e319940fde97f76e98bb0377a0e040472785e01601d64a585cc40c814c5c737cfb6ef5b

  • SSDEEP

    1536:ysMH18d36sv0W7TmvtarHXzh1ohaSGG8xNuJYQvjbu+uSJE0ymtktUdt0GkRc8el:xWiDGCzj6N8xNRmhKhmtktUdt/8e8hs

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lupa

C2

83.97.73.129:19068

Attributes
  • auth_value

    6a764aa41830c77712442516d143bc9c

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00080000000122f3-83.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections