General

  • Target

    0x00080000000122f2-127.dat

  • Size

    172KB

  • MD5

    807ccfe89592fc0babe63e26a1761ea2

  • SHA1

    963a322c4bed81653a2c40424979f2a1ee3c1c4a

  • SHA256

    0ef7d738e95dd0d1534aeddf0b1a8ed6d3d8a3475345a6429619cd06dae123ab

  • SHA512

    1ec77f8c329d5d0303ed93310625ec07c8e228eb21d68898f2fe9aeb590317a09a7f9e079caade86e8aebbf14b4e6c29802d336acd3d7546ac2af8d897ea3e58

  • SSDEEP

    1536:8/tcDOd2V36sv0W7TwiQjrH0V32ai6xWqlB2fxNiLYQ9VbuyqN9fkyt0GkRM8e8u:6yOUrhD3TiG72fxNbqA5kytf8e8hw

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

muha

C2

83.97.73.129:19068

Attributes
  • auth_value

    3c237e5fecb41481b7af249e79828a46

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00080000000122f2-127.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections