General

  • Target

    0x000300000000073b-160.dat

  • Size

    172KB

  • MD5

    1b5768728634b424415c2ea1a8f04f7a

  • SHA1

    182ea0eef1e46010d94180d48f8e9d2a90773aac

  • SHA256

    d37034ca79319fbfddad5d54e8df2146c3925d0b4695c84f2047da0fc19cf62b

  • SHA512

    268e78a8738e90df3de951cfe7e69244d5c1c470896f0daa75d8b790b3f29cba9c4d9cb6fe48c24e7b8021b94a3792baa91a402cf24ee4b5c5594b7536634881

  • SSDEEP

    1536:8/tcDOd2V36sv0W7TwiQjrH0V32ai6xWqlB2fxNiLYQ9VbuyqN9fkyt0GkRM8e8u:6yOUrhD3TiG72fxNbqA5kytf8e8hw

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

muha

C2

83.97.73.129:19068

Attributes
  • auth_value

    3c237e5fecb41481b7af249e79828a46

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000300000000073b-160.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections