Overview

overview

10

Static

static

10

0x00060000...43.exe

windows7-x64

10

0x00060000...43.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0x000600000001b012-43.dat

  • Size

    174KB

  • MD5

    4fceee38c2b1ad6c8703cca8b44ac53d

  • SHA1

    63836f2f934eb5958c8a7b561580ebbe2971152e

  • SHA256

    80330245e41679557e7c1f76596a4cc7507b7e8411e9bd6e4ac4fd38b63d34dc

  • SHA512

    8b394c1a1a5caf51b4ea269bba22fa65756303a55dec98fba2c0ffcfee9e1e43d7135a6e3bf4885a6bef3f156b084ffa6b6dc5ca69dbadbcbe892d6a7b3c9a43

  • SSDEEP

    3072:U8He04vlI0sWLkfOdaPgr8TDFE06EtGUP4mJ18e8hP:U8HslI0sWLkI8XFE0aUP4mz

Score
10/10
rwanredline

Malware Config

Extracted

Family

redline

Botnet

rwan

C2

77.91.124.73:19071

Attributes
  • auth_value

    7c40eda5da4f888d6f61befbf947d9fe

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000600000001b012-43.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections