General

  • Target

    i9178330.exe

  • Size

    174KB

  • MD5

    afc1e8a18345230cd183d5caa717024c

  • SHA1

    13dadaf397385196624c059f643e01e33bb2402e

  • SHA256

    8ae0c7b8458de99a51531ffac8fe5a67357282ab33173355f96b03848a62b86a

  • SHA512

    99b045f690cc5124660b631c1a0a435b090be91033ba3e7ae2bd83e67e89533015403714d6feba4156969e361289c6671ce382007700bba10fece2e9c3e7a729

  • SSDEEP

    3072:Orq1iR3I0swsZuOkpBbVbE02RNAqTzJY8e8hi:OrT3I0swsZcbE0XqTz+

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

dava

C2

77.91.124.54:19071

Attributes
  • auth_value

    3ce5222c1baaa06681dfe0012ce1de23

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • i9178330.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections