General

  • Target

    0x000700000001422d-78.dat

  • Size

    172KB

  • MD5

    eb15a2b8d06f9dbaa1d3893af9bcec10

  • SHA1

    7b0f8442933274581973b558fc41b41d98811e3a

  • SHA256

    3d462173a484d0d11e8cfba77095720aa346cff92252d421ffaeb4b17819700c

  • SHA512

    eadb69249274de3d82a2730663228c164f3e9b86cd196384e2867cf6d0a2bb8ad51f92df5e4dc8cd9df5dfb8203af34c1c0dbdc0975148773ed0ef7b76ca36ba

  • SSDEEP

    1536:0LmZSQ36sv0W7T5CJv5rHvbzV1YWWUkm+HLgxNuHYQzBbunsIWs+Rxf0GkRg8e8D:06caQbXzYak3HcxNXwZJs+RxfD8e8hh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

dana

C2

83.97.73.130:19061

Attributes
  • auth_value

    da2d1691db653e49676d799e1eae2673

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000700000001422d-78.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections