General

  • Target

    0x0006000000023279-352.dat

  • Size

    221KB

  • MD5

    e1a55ff22a63312547c43f4eb8823860

  • SHA1

    0f13cae7c4a374582bbfdc71a1b7322bc8b37e9f

  • SHA256

    ac8d5603b1935b117e5e00b010250acca4612dd7c84f30c36acb4f225318c559

  • SHA512

    7fd4b591e7180a2b083cea851dcbd7d6306070c843d77ac566744d6b4b07fca75a4e5280362738dcb8f8a7ec0b83040f24d099f61bafb10c20a0ec42bdb79aa1

  • SSDEEP

    3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lutyr

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000023279-352.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections