General

  • Target

    0x000600000001afae-159.dat

  • Size

    173KB

  • MD5

    b0686c3e579bcf8a50e7f339da5219ef

  • SHA1

    879857c5fcbebf8e17f0c014a3e1351502e26314

  • SHA256

    68ed5b347efdcbbaefa3cdf63e343dbc8638d7be507b52557a586eba7c9f77e1

  • SHA512

    e144acfd2a53034053a78a04ffc61a6959692cd44c4db8bc157ba98c11d5861a8828212b610f76652e1f72022246773714d3ad12354e1652c9ac92e2e52a365e

  • SSDEEP

    3072:eTS18qdsI0PBESjOvGew8Z88FQE02quBoeaTJ38e8hr:eTSfsI0PBESOZ88FQE0QoeaTR

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

dugin

C2

77.91.124.73:19071

Attributes
  • auth_value

    7c3e46e091100fd26a6076996d374c28

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000600000001afae-159.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections