General

  • Target

    0x0006000000023268-41.dat

  • Size

    222KB

  • MD5

    2655b63944682c2b52ff656c9b1eb310

  • SHA1

    60861713db56ff1c513a6b237c77152321f28459

  • SHA256

    b6ddb0ef18ffabc4b8d081def3e6163453657b4b82f026f1060b8ab9df991fda

  • SHA512

    ac3ae7df06289b2f06d42b369381c865aa6b1345a230f11631cebea24019e57b9c0ef12264311a319825b9e9974ff16e533de2b6d2d7b5431f75132fb4fd45d8

  • SSDEEP

    3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lutyr

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000023268-41.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections