General

  • Target

    0x000800000001231f-107.dat

  • Size

    172KB

  • MD5

    3f8bb47e4e3b0ee67699d04b409fb52c

  • SHA1

    3f5d4b92b9ba7bcc721b457205cfc5ffa37d74a6

  • SHA256

    b9eab12e5fd7694c8751bad39c6e7d79e7312c68aa6a8561084f72233f59afd7

  • SHA512

    7c08c39eeebc4f867b4ca1d89636f964d5ae33e25c80b4f24dae1e878878decaae4972674cf87200e0ea2984c19eff5d86a6b76a6c7292d22a2ff8b46d133364

  • SSDEEP

    1536:h5XZucNjBql36sv0W7T6Z9bHOrHbRxLvE9mBmjM1xNH1YQLzbusqxoqjOF0GkRqt:7XJWbuzo7L84mM1xN+iQOqjOFp8e8hK

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

dare

C2

83.97.73.129:19068

Attributes
  • auth_value

    cdee8b76b5a70827d5d5e110218c7d2f

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000800000001231f-107.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections