General

  • Target

    0x0002000000023106-197.dat

  • Size

    173KB

  • MD5

    7af920fb007d8fe05748d1ac84e32230

  • SHA1

    4b6bed0be507b94cdb367655046bebda97883909

  • SHA256

    99f67bafc6fc40a6dc726d01e24a24ff4bec58b1b8b98205c4bdf57c3e595722

  • SHA512

    31cc6f49cd33f22b7239615314a1c1c3326054ef88b1d57806075df77d8b5933b6b5169a67009deeca8d269a6533f2b9b51d35f630e8910d73379c5301832398

  • SSDEEP

    3072:QUYvpRfFyNgq8oMGl9ixNcO3qdLbkSh8e8hb:kVoVrLbkSh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

duha

C2

83.97.73.129:19068

Attributes
  • auth_value

    aafe99874c3b8854069470882e00246c

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0002000000023106-197.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections