General

  • Target

    0x00060000000232bf-374.dat

  • Size

    222KB

  • MD5

    2544584da42b0a884b1bbcd9eff6bcf1

  • SHA1

    c8e7a009a9f237e782ea6f1cac5957fb4b1d9aef

  • SHA256

    c1a484cd288cdb7ef4dc8a36d6bcc97673953a8fb300d2968194df5942dddf46

  • SHA512

    ea4f890203c230c25e7b4c235ff5cc777e4e34ca7746355217fa54eed18b47a6f1ed728b7846224e51b2c292d253ce65d1ea811986e4a68367b3cb0aaead5fa9

  • SSDEEP

    3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lutyr

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00060000000232bf-374.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections