General

  • Target

    0x0007000000023294-350.dat

  • Size

    221KB

  • MD5

    087713c2470fbb8c437462da658bc13e

  • SHA1

    a9a7c34eff98a30e4cfbf80ca25bc152a7e980e6

  • SHA256

    9075f70b93ce496217551f4b0c129f09de25005556712b5f3c6bdc8a733fb6aa

  • SHA512

    e3b3d4b36924b9fa3cd196dd5ccd44a021c4841193022c1415315112b7372603de029b0169e30d379d4be18d921bf2788705121ec532d28de18e6a9ef1369226

  • SSDEEP

    3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lutyr

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0007000000023294-350.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections