General

  • Target

    0x00070000000231e7-178.dat

  • Size

    173KB

  • MD5

    84a86017c26d53058839b22fd47e9aef

  • SHA1

    7bd7867caea09af9ba358230dcf6efeef99426b7

  • SHA256

    4806b79a1b28149033917b6c3247d7529885c2c7b4573874cc5e945a74a3d772

  • SHA512

    20366ce9d3dae428c643e5d3d2ca8ecf38de7c0c0e76d61514c920b7e6ac4d4662d5e381aae2d2beccb1be50f3e108048a0e48b6a60a68a83cb52910a7d505fc

  • SSDEEP

    3072:eTS18qdsI0PBESjOvGew8Z88FQE02quBoeaTJ38e8hr:eTSfsI0PBESOZ88FQE0QoeaTR

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

dugin

C2

77.91.124.73:19071

Attributes
  • auth_value

    7c3e46e091100fd26a6076996d374c28

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00070000000231e7-178.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections