General

  • Target

    0x000700000002325b-41.dat

  • Size

    222KB

  • MD5

    ebc0f64cb2d805910107daba7b7e65d0

  • SHA1

    0b7bcad07626de11d4eaa77d712c6dba9b5f78f8

  • SHA256

    e638227748e90b53e92cc111a0993674e52c905178fb99fff5dbb3d7c894d5ba

  • SHA512

    c82488983fd78770487c994a94328c67f2cb2c6330ebc7a86425f45524ae8763bb8b3499e92c123b7d3a9509d982d036d78790ede92233f1e2da959fa704509c

  • SSDEEP

    3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000700000002325b-41.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections