General

  • Target

    0x0006000000023228-45.dat

  • Size

    174KB

  • MD5

    2e2411fdeb71990a399e17653850ffad

  • SHA1

    3d63493ac02d81e2b03194108e4d8ce4cec80dcf

  • SHA256

    8ca48ecd18f417f5dabd504244d9e616ae6decc205822f8674a65a439ac46078

  • SHA512

    fe46294f4d06e93e86224c3529e51d78e71cefd6826e8e3aa166233661e2adab2d842ef716f912f748dd079cc978368b380d35a1c8c37af55b768ef5058cace9

  • SSDEEP

    3072:itMMNILgWOI07QlEZO0pIAIH5uE0u3zAfbs9JN8e8hS:i2MyOI07QlE4uE0Wabs9L

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

jaja

C2

77.91.124.73:19071

Attributes
  • auth_value

    3670179d176ca399ed08e7914610b43c

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000023228-45.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections