General

  • Target

    0x0006000000023225-41.dat

  • Size

    222KB

  • MD5

    4e6b8bcc3012040b79f3fcdb787d1ff3

  • SHA1

    a10a290f59cc27597a7eddd7af58c5bfb00899dd

  • SHA256

    5ab44ccb5944e9e5be7bd94c4348163470b961541a3203c9edfde51ba6eb4ff4

  • SHA512

    09f404e3d41c675fc69e50aae82415a4fa908ab01ee4fc5bc15ad1f019a4e528bcd688637fa5108919095d3e9672ccaeea6fafa2857548648b78e5e7fa6f70ed

  • SSDEEP

    3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lutyr

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000023225-41.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections