General

  • Target

    0x0007000000023168-263.dat

  • Size

    172KB

  • MD5

    12e7c317afbdf9c57ccb25c14a01190c

  • SHA1

    cf6d1114cbce3db79421eedf35fd53e283a14d86

  • SHA256

    d0647bcc1a5bd12ee79941329d87054dd180c2b99ed68be60633bc95f9977e4c

  • SHA512

    d596c7a4ff51fbbd7ce778fefb1e19b560686650c8aea6d1792db3fc55459dabeaa810a3429933e3b63e18b0087858ccf271ccae2d9770fa88b17d71d1a5b164

  • SSDEEP

    1536:h5XZucNjBql36sv0W7T6Z9bHOrHbRxLvE9mBmjM1xNH1YQLzbusqxoqjOF0GkRqt:7XJWbuzo7L84mM1xN+iQOqjOFp8e8hK

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

dare

C2

83.97.73.129:19068

Attributes
  • auth_value

    cdee8b76b5a70827d5d5e110218c7d2f

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0007000000023168-263.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections