General

  • Target

    0x00070000000232c8-345.dat

  • Size

    221KB

  • MD5

    e58a1fb85b6914dad49ff7f4eb23ec13

  • SHA1

    eccc19bfb8a5c56887ace2ecb1123857e0970962

  • SHA256

    d26060452758b7b2dbda113e34bb8f97e423a9985308de3c7268226258bf9224

  • SHA512

    2543607c3d8d1e1a395768fcc06fd21a8403af33e6d7de43a581d15ce337c795b92de0330bf9a2c3b3ad18e179fb48ccf779840a9d551003d6b0016b4e338b30

  • SSDEEP

    3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lutyr

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00070000000232c8-345.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections