Overview

overview

10

Static

static

10

0x00060000...96.exe

windows7-x64

10

0x00060000...96.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0x00060000000230db-396.dat

  • Size

    221KB

  • MD5

    2a8e605e76210cbe020838670218592b

  • SHA1

    96d05f7eda052a5ba906b790d83338095233df28

  • SHA256

    a551b89b7e7ddc3ec6bcb9ea8c5c720c820de2a9a6ae213d0d3483f6f03f632e

  • SHA512

    3abaa997a72cd241d61853f48e3138650a1bd8169dc555aaf1c0dfb5ad2ae8de938e0318ca3386bafbd026338524797db304f30f88cc588f6cecef37bf1ea82e

  • SSDEEP

    3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa

Score
10/10
lutyrredline

Malware Config

Extracted

Family

redline

Botnet

lutyr

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00060000000230db-396.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections