General

  • Target

    0x00060000000232a3-307.dat

  • Size

    221KB

  • MD5

    686fa018c1c88fc365e8084396f0097d

  • SHA1

    378da899c7b66d8a7a94cb2762f872d9ad7b79b6

  • SHA256

    1864a583c00dd2044c8ba6b5001abd09a14dd50bd0fa56b2f3b1952a985aa8b5

  • SHA512

    17a1e701f655f8d609c8396fede8b5a999d703d8b0277f145e25b1e70bf0dcdb3666216b6eff03b936b87711fb7e36eec7f9efee48ca02c40923255bbb63af1c

  • SSDEEP

    6144:dWHOOQNgcKHCD2o/FdBa/xVs6CLlRXs1:dEHQNgcKHxo/FdMKRXs1

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

larek

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00060000000232a3-307.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections