General

  • Target

    0x000a000000018b7b-95.dat

  • Size

    172KB

  • MD5

    8f0c994ca24d275d8a6bb30e904d20c6

  • SHA1

    5c194b77949bb584fb64aa453419afa4bd3b1092

  • SHA256

    5a58766cfd7b4e93669849142e7a7ccf23381fcaef17115e642ccc83a43b1794

  • SHA512

    9079b4879a6b49c0335a65f4241b922956c788ab795e449b5cd6efd4d9c519ba8dc78a45a8341444f5aaac9e42e3d132c31d316baf8585f3c8c4e22b78060e64

  • SSDEEP

    3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

nasa

C2

77.91.68.68:19071

Attributes
  • auth_value

    6da71218d8a9738ea3a9a78b5677589b

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000a000000018b7b-95.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections