Overview

overview

10

Static

static

10

05002799.exe

windows7-x64

10

05002799.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    05002799.dat

  • Size

    172KB

  • MD5

    0ccbd41686c78de39209a182c823b011

  • SHA1

    56d1359e4327d592e06130f8ba0253fb9fe1134d

  • SHA256

    6077f5cb589a11a5d4a9364b796797ea1dc2a4b006bd67146180a129b1977ea5

  • SHA512

    67ed127603f8e5c0e65a7497a27f09987e53c9539a3513248a37418dfe640bb2bac2eabf577d4726247943a165203264886f275332efbb323d74d0bf30eeda32

  • SSDEEP

    3072:QUYvpRfFyNgq8oMGl9ixNcO3qdLbkSh8e8hb:kVoVrLbkSh

Score
10/10
duharedline

Malware Config

Extracted

Family

redline

Botnet

duha

C2

83.97.73.129:19068

Attributes
  • auth_value

    aafe99874c3b8854069470882e00246c

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 05002799.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections