General

  • Target

    0x0007000000023222-394.dat

  • Size

    222KB

  • MD5

    b6ed022678c809b637ea5bb569240c1d

  • SHA1

    b2755589e256dfecd91c81a5946c331807902d6f

  • SHA256

    0fc0e59d62fed2bd1e8d720ac9049ce60259d309f4a8d5ef736d1fd87621a08d

  • SHA512

    5d0b4d99f2f08abe601ed500c2a14d4670fbb2bcb95561207cbf418a0022c092e819514e8906f468ca59dbe7c690bfaa9250f4511a7acb4eac6e01682fe7de98

  • SSDEEP

    3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lutyr

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0007000000023222-394.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections