General

  • Target

    0x000600000002325c-385.dat

  • Size

    221KB

  • MD5

    3089f9c445a15ccf1fe329959d8971a0

  • SHA1

    7987c857965f85d109f61c82a5edfab81d0be1aa

  • SHA256

    a8c8620de31909d3451943c4a18bd021404c9fbfd1d3c987ad457f86453751e3

  • SHA512

    d0982c8c29d9242836768f0b077fe21f49c39132eb4cb1979b25059b3fa8d7b211a75872f6b5c2f2fde5bd4204affd2086d9808f052d9e88f960e8ca90da2cf8

  • SSDEEP

    3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lutyr

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000600000002325c-385.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections