General

  • Target

    0x00080000000191f1-127.dat

  • Size

    174KB

  • MD5

    ed32b4a669b2125ba62ad2d0165d38c4

  • SHA1

    f383db4323e4c3068f4406162ea4a9d191f9d028

  • SHA256

    3044a3d84c431c4f7cece25b647dbfe453a5548a6ebe3a1ab703912074864800

  • SHA512

    04f8c56d50b2227e1468bf2b447d3dced6f4868e9e26aac5b5a9298bc42f3c6ed8e82225ee9e2a6e7d97d74cc0e54c5e73f44d4f21677e5f254828b8d1154bbf

  • SSDEEP

    3072:9SZeJjHB9I0U6o4uOpN2AKU0BIE00KmH5kGvJk8e8hU:9SZe79I0U6o4D0IE0I5kGvi

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

micky

C2

77.91.124.172:19071

Attributes
  • auth_value

    748f3c67c004f4a994500f05127b4428

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00080000000191f1-127.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections