General

  • Target

    8a865147706fae83eaf427c54aa03502.bin

  • Size

    221KB

  • MD5

    8a865147706fae83eaf427c54aa03502

  • SHA1

    efb346b75463e94bf1534d68ce1e5bf72ad35567

  • SHA256

    7ac2166459f9eb647e3603eb120354bdd3b8450ce0d2c7388d1d2ef50fd2175e

  • SHA512

    95f092c9e3cbce2b0157a96339e6d53bd760b6c7999c384c93e0750f2fd2f9ad766ee7cd020b0d9ba4b5b7b189cf604c12c1238846ceb3c0128f0a28b4866cf1

  • SSDEEP

    3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lutyr

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8a865147706fae83eaf427c54aa03502.bin
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections