General

  • Target

    0x000600000001657c-58.dat

  • Size

    176KB

  • MD5

    9f742bab43dfec98dc478f7a3f4912e1

  • SHA1

    a4c22cb05e5c27a049e930988a03325c1406b3e2

  • SHA256

    88ff29a50f5600f36d8b2a78bc266a6d7a54a7057f3cdc43cf235b7aef2ca77f

  • SHA512

    d2cc5ccc7ea31d404c47decd307bcd45f309fcd97f887fedb7ee8e034355cf5f60713b559475699224d6f3d01c2254d4fb25972350b9796b48c3322f97018fe5

  • SSDEEP

    3072:1hg4vliHjI05aBkbOVCFlAsNN4E0sW+1QlQneUJE8e8hA:1C44jI05aBkF4E0KQlQneUC

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

sruta

C2

77.91.124.82:19071

Attributes
  • auth_value

    c556edcd49703319eca74247de20c236

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000600000001657c-58.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections