General

  • Target

    0x00080000000122e9-107.dat

  • Size

    172KB

  • MD5

    626474f65085c52439dd0934485a7a9d

  • SHA1

    5e2decb00316471142c39551069030499727bf1f

  • SHA256

    9642a303d068691b290c968c62dad16441f163ce5e9f2712f847c72308a4c4a7

  • SHA512

    a754ec0ef8e6ea8a02439673ccfabcbff79d32ac12f98b856fd0c21158d3354b9a3c128c88fd6e840bf181e823d1c7e9a74c8cb74a48a8a106917a80185a000e

  • SSDEEP

    1536:0LmZSQ36sv0W7T5CJv5rHvbzV1YWWUkm+HLgxNuHYQzBbunsIWs+Rxf0GkRg8e8D:06caQbXzYak3HcxNXwZJs+RxfD8e8hh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

dana

C2

83.97.73.130:19061

Attributes
  • auth_value

    da2d1691db653e49676d799e1eae2673

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00080000000122e9-107.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections