Overview

overview

10

Static

static

10

0x00070000...68.exe

windows7-x64

10

0x00070000...68.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0x00070000000231ba-68.dat

  • Size

    175KB

  • MD5

    721c2f30e7fdeb9e1416f5f19e665273

  • SHA1

    a38400439c4b2288b61b81f64e297f305fba820e

  • SHA256

    2779a942cd1484ce630def7eeb7336cba6aa9ed939d229f0e77442cdbbc31d63

  • SHA512

    3eea09b7ac9f77e11ef01d8ecc7bff5adc0d2d66512d51cf88a62bc289075a7884dbba2213ea022cf0b17c7b72b324e59c5c723b020f6339347d1d9c31a8c808

  • SSDEEP

    3072:KiZIEVII0FNuHZOJpFLizeIkqffffffffffffffffffffffvfffffffffffffffm:KiVII0FNuHYIpffffffffffffffffff3

Score
10/10
tuxiuredline

Malware Config

Extracted

Family

redline

Botnet

tuxiu

C2

77.91.124.82:19071

Attributes
  • auth_value

    29610cdad07e7187eec70685a04b89fe

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00070000000231ba-68.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections