General

  • Target

    0x0007000000013990-107.dat

  • Size

    172KB

  • MD5

    1c41718a9dad6a30e5233fb443dd0f6c

  • SHA1

    aee6dd6f9af970485adf638c631a9a7407eee4fa

  • SHA256

    3127c77f7b7f4f5e033e13a5082a4c87de09009190717e5308109c0e9bd222f0

  • SHA512

    25cfdc53ecf8e1d88bb55000c96233236cd5543100fde4270c3a29c834db3cf382e6853f6b7786df35f7d33f3914714e85e7ffbf69d2efd59dd7e9711eb12fb8

  • SSDEEP

    3072:PZ+q6hVbwIxxiIDg8qAxNKcbMhQ4k9o8e8hi:PZ+q6P7ihjB654k9o

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

diza

C2

83.97.73.130:19061

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0007000000013990-107.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections