General

  • Target

    0x0006000000023119-288.dat

  • Size

    221KB

  • MD5

    e43ed2f89335b4323450cc5a8b743a12

  • SHA1

    578aa2a3018d58c9162fe9fd4d30e65a352fe58e

  • SHA256

    462b13ad372a6c80aba06a0b94583199ecf97aa2122db642ee581f9ca5b96214

  • SHA512

    70d7c974f40c7b03608697fdfea69d3b5c1187683a78f0659c043264ff2ab2d508d80e76aa0814f5399b80de6ca5fb0a6c9517e67e350bdef70dfd4c2d37002f

  • SSDEEP

    6144:dWHOOQNgcKHCD2o/FdBa/xVs6CLlRXs1:dEHQNgcKHxo/FdMKRXs1

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

larek

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000023119-288.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections