General

  • Target

    0x000600000002327b-353.dat

  • Size

    222KB

  • MD5

    29aa5085f5ba00e82cefeb4cd7e70942

  • SHA1

    16ee26b83592d5d0cc57612ca6b9985e4768947b

  • SHA256

    70f8a2e79b674e59ae0af9c5be4cc0d62bc226d37c106dba147ccf1b96edf500

  • SHA512

    25f52c36ab0b6b074d8b20dcfa938975b385ccf1ebf24e8dc1cd451a844053b857e0de9289e012e88982291dfc09d118aac58f418e351b5e17ffcbe742ebfdc7

  • SSDEEP

    3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lutyr

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000600000002327b-353.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections