General

  • Target

    0x0006000000015cca-53.dat

  • Size

    221KB

  • MD5

    24fcc0aa416c1d4afda4dcbaf2cb900f

  • SHA1

    670ea8ef09a3bfda5a15bfb189b75488150efdf5

  • SHA256

    f42eb83265c066e8429e941e951c89c219fca4ceede5d81f8a3f43f8fa758164

  • SHA512

    6a02ae0810659542ce8afd1665eb639082b5b5bd7296d2078201e445b309bf7c5557cbaf848a618304f7abe2b0991e5cab7fe701b0d6420ad79478c8f6352430

  • SSDEEP

    3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000015cca-53.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections