Overview

overview

10

Static

static

10

0x00060000...78.exe

windows7-x64

10

0x00060000...78.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0x000600000002320e-178.dat

  • Size

    173KB

  • MD5

    9a5e3445362465a774e4f4f1385458f8

  • SHA1

    e9b9608abcc36f22a3afbddbd1a4016f291ef6e8

  • SHA256

    e7cf7b27be77d99712ad00da101587d3e4cb7801ff949833ebb44290ab5b835a

  • SHA512

    fb828c1f87ecbdabba328eab40a9a889e1b2a412fe3f421f77cbf9e6f28b5fee0f9af838a8483a5cf5e2b115035d9f6fed9c9e3006049d85d6a6ae590d2e6fe6

  • SSDEEP

    3072:eTS18qdsI0PBESjOvGew8Z88FQE02quBoeaTJ38e8hr:eTSfsI0PBESOZ88FQE0QoeaTR

Score
10/10
duginredline

Malware Config

Extracted

Family

redline

Botnet

dugin

C2

77.91.124.73:19071

Attributes
  • auth_value

    7c3e46e091100fd26a6076996d374c28

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000600000002320e-178.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections