General

  • Target

    0x0005000000019bf3-58.dat

  • Size

    175KB

  • MD5

    d7664f7eb74bb9ff363eae163eaa0177

  • SHA1

    f86d7988864df15eba6651c70429ce2913c5891c

  • SHA256

    d3e1bdec1ed827675cd2814412e2bcd0d15b9c09ce42983c03dd26c16552d88b

  • SHA512

    22bef8bf07f1656589b36be98576f919002fc799a7e97150f5b161440e2ffb9c6cb96709a926858efb5390ab7b5e2f9ef28738536660e259ac210b10abe1b7ba

  • SSDEEP

    3072:1hg4vliHjI05aBkbOVCFlAsNN4E0sW+1QlQneUJE8e8hA:1C44jI05aBkF4E0KQlQneUC

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

sruta

C2

77.91.124.82:19071

Attributes
  • auth_value

    c556edcd49703319eca74247de20c236

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0005000000019bf3-58.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections