General

  • Target

    0x0007000000023235-180.dat

  • Size

    221KB

  • MD5

    08a83fddbee5ae7ec81b3314f6d8fe32

  • SHA1

    9d065898ff421f9fda972dd5dac8eec6389195b0

  • SHA256

    03d223becb2046f8b5ac2a2aa1d0577286540ef259ef119495d10aea1b45b926

  • SHA512

    1644d913fd3a7570407a3817bd77b57e59f478187a501c4ec15a575d9bb4eec12905bc06fa9d11e2e763a2024faf779f423adad5a8b2972f7768ebe55e7c4314

  • SSDEEP

    3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lutyr

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0007000000023235-180.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections