General

  • Target

    03444699.dat

  • Size

    172KB

  • MD5

    d92932b958b20deec3d92e822fbbf735

  • SHA1

    2f126f21e4349a3e5d13fd88dbbccbad8445a878

  • SHA256

    603e7af2d3ecb8543dc648967a92078f906ff6c394ba7435ff7bf568e632baf2

  • SHA512

    643fdb2ecc8c15906fa7451aee5a8335dc10d7fbd62db97a075901077732b1d847f561d4231756fcc353535ebf7ff05830e1bb0cf6d951c49a33ca2d8187b086

  • SSDEEP

    1536:8LCMmb36sv0W7T6brprHtRAMWQM2xNxcYQHBbuf8I7K8A0GkRk8e8hh:oCBh+DRzJM2xN5U9kK8An8e8hh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mast

C2

83.97.73.129:19068

Attributes
  • auth_value

    95784a9ad2d19498f84abcf8e48d8da8

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 03444699.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections