Overview

overview

10

Static

static

10

0x00090000...49.exe

windows7-x64

10

0x00090000...49.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0x000900000002323d-249.dat

  • Size

    221KB

  • MD5

    40a71afd2c9f1ee911546e6072b4d89a

  • SHA1

    ff0f8cfd9b19a1574a45380a14638324522f9dce

  • SHA256

    106b6eca56317c9a3329328a5750de3fcb755cd07a6ccee264f58b84332dd1c2

  • SHA512

    cfe6585072db27ff840f4e380f814c37812111711795ac1287021a0d4fb24beec38d5745b93a675ceba4fdd396040542c38f647214c39ebab76a83a8cc50b4c3

  • SSDEEP

    3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

Score
10/10
kukishredline

Malware Config

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000900000002323d-249.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections