General

  • Target

    0x00060000000231dd-83.dat

  • Size

    222KB

  • MD5

    d291ac4f526a1ab7bcb640ca71d8d460

  • SHA1

    a187d01140d9239f61846af0a80ef3e2fa476d15

  • SHA256

    e887eb9dfdda250285a85f0c7f6abf67083682066d7b1b3c597527a01f75b8cb

  • SHA512

    5d1668d498c1e8b01c261df275e25da0e92a2d7d65f3a067d1a8f58c7d2e2e912b4e1f6351918338506a30a8f49407abdf3442e56be05ca40667cfc6cd50cac0

  • SSDEEP

    3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lutyr

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00060000000231dd-83.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections