General

  • Target

    0x000600000002323f-370.dat

  • Size

    221KB

  • MD5

    c48c823fe337d3416120d1bda9c5452e

  • SHA1

    d504c186b0990b6bac5a2ccdb7fbb722314f5fb1

  • SHA256

    ba4bd7d8a0aa648e4b938416ef637a594679faa387c56ea681ec7dcb1e8a68b9

  • SHA512

    ec536e80861f08a542cda20be357b408f88bae5e6e16bd1e9cbb3701d41565950e5be8cf9f90b99fb29688c676a3f06201fe73d8beceea75ca273d2448e53613

  • SSDEEP

    3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lutyr

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000600000002323f-370.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections