General

  • Target

    0x0006000000023251-353.dat

  • Size

    222KB

  • MD5

    dfc5c230f2e92044d0162c2c04ce7903

  • SHA1

    6d3fc8a52fe5159a260cec5febe4c4f3e98a04f1

  • SHA256

    580e6b55322a4b8fe4a557734aa7914ab21268bb37a1a64194a01932e27fcae6

  • SHA512

    ec5233e0c54cfd5569905c8660c33f147fca83365f76fae516b67ca32a815183ec7c1d74bc17006aa51b8a55d5c08071415213473fccca42c724af38a33d387e

  • SSDEEP

    3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lutyr

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000023251-353.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections